by Alchemist
Written in Visual Basic
Released in April 2003
Server Dropped File: c:\WINNT\CSRSS.EXE size: 495,616 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Runtime Process" remark: tested on win2000MegaSecurity