Written in Visual Basic

Released in September 2006

Server:
dropped files:
c:\WINDOWS\system32\DIjpg.dll        Size: 413,756 bytes 
c:\WINDOWS\system32\FREELIB.OCX      Size: 165,376 bytes 
c:\WINDOWS\system32\KeyLogger.ocx    Size: 45,056 bytes 
c:\WINDOWS\Temp\server.exe           Size: 131,072 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Temporary"
data: c:\windows\temp\server.exe 

port: 911, 1111 TCP



tested on Windows XP
September 23, 2006