Written in Visual Basic

Released in March 2006

Made in The Netherlands

usage:
http://80.241.177.80:37/mrx01


dropped file:
c:\WINDOWS\system32\winlog\taskmgr.exe
size: 32,289 bytes 

port: 37 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "winlog"
data: C:\WINDOWS\System32\winlog\taskmgr.exe 



tested on Windows XP
March 26, 2006