by Spok & Sug@rush
Written in Delphi
Released in April 2000
Made in Great Britain
Server:
c:\WINDOWS\TEMP$01.EXE
size: 369.664 bytes
port: 1784, 3586, 7609 TCP
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "System-Tray"
added:
c:\WINDOWS\TEMP#01.SNI
MegaSecurity