Written in Delphi

Released in July 2005

Made in Brazil

more versions

Server:
dropped files:
c:\WINDOWS\system\KEYLOG.DLL    Size: 46,592 bytes 
c:\WINDOWS\system\WF.exe        Size: 816,128 bytes 

port: 42024, 42025 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinFire"
data: C:\Windows\System\WF.exe 



tested on Windows XP
November 17, 2005