See Beast 1.7

Written in Delphi, compressed with ASPack

Released in october 2002

more versions

Server:
c:\WINDOWS\SYSTEM\hservms.exe 

size: 772 KB

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{AS096941-B967-10D8-9CBD-0000F87A369E} "StubPath" 

added:
c:\WINDOWS\SYSTEM\kb.tlg 
c:\WINDOWS\SYSTEM\mshost.exe