Released in November 2005

Made in Russia

Server:
dropped file:
c:\WINDOWS\system32\shdll.dll
size: 3,584 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\shdll



tested on Windows XP
March 18, 2006