Written in Visual Basic, compressed with UPX

Released in June 2004

Server:
c:\WINDOWS\SYSTEM32\svtchost.exe

size: 95.873 bytes

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AutoUpdates"