Written in Microsoft Visual C++

more versions

dropped file:
c:\WINDOWS\system32\attavget.txt
size: 15 bytes 

port: 5135 TCP

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "setFTPBack"
data: C:\WINDOWS\System32\createsw.exe 



tested on Windows XP
December 14, 2005