Written in Visual Basic

Released in April 2007

 

Server
dropped file:
c:\nombre2.exe
size: 94,261 bytes 

port: 6881 TCP

added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "nombre3"
data: \nombre2.exe 



tested on Windows XP
April23, 2007