Released in November 2005

Made in Turkey

more versions

 

Server:
dropped files:
c:\WINDOWS\system32\Crss.exe        Size: 296,450 bytes 
c:\WINDOWS\system32\lusrmgrs.bat    Size: 141 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "Crss"
data: C:\WINDOWS\System32\Crss.exe 



tested on Windows XP
March 24, 2006