well I looked into it more deaply, after running it, ports 3001-3003 were open by svchost.exe I killed the svchost.exe that did it and it reloaded with out the ports being open. I saw no html or irc type strings in the exe, altho that doesnt meen much if they used some sort of encoder. all in all this person shouldnt be posting a non working emulator. Its not a ds emulator , its a program that looks like one. It has no emulation value at all. Also, if it is real and just very early stage, this person shoudl be open source to show that its not a virus/bot I say to be safe just delete the post and if and when they can show its not, then and only then they should be posting,
ok, this is not a virus i would not post here a virus. this is some file i grabbed from a pc that have a security hole. the ip doesn't exist anymore. i just wanted someone more experienced to look at the exe and see if it contains any emulation code. but that was answered already. Let's see if that turns out to be an emulator. ill try to catch the guy again lol. dynamic ip's suck and yes. im portuguese.