Written in Visual Basic

Released in June 2005

more versions

Server:
dropped files:
c:\Documents and Settings\%user%\Local Settings\Temp\services.exe
size: 3,104 bytes 

c:\Documents and Settings\%user%\Local Settings\Temp\winlogon.exe
size: 32,333 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{Y479C6D0-OTRW-U5GH-S1EE-E0AC10B4E666} "StubPath"





tested on Windows XP
June 26, 2005