by Tianhao
Written in Delphi
Released in February 2006
Made in Poland
Server: dropped file: c:\WINDOWS\system32\schost31.exe size: 767,102 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "schost31" data: c:\Windows\system32\schost31.exe tested on Windows XP February 16, 2006MegaSecurity