Written in Visual Basic

Released in March 2001

Made in China

Server:
dropped files:
c:\WINDOWS\TEMP\file1.exe   size: 108.336 bytes 
c:\WINDOWS\TEMP\file2.exe   size: 45.056 bytes 

port: 5419 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "windows"