It's source code is available too. As it was created using Delphi this looks like the same problem KipeeCraft had. It is probably one of the components used to connect to the API and get the XML triggering a "trojan" behaviour...
---
 |
Technical Support |
---
powered by ryzom-api