Written in Visual Basic

Released in December 1999

Made in China

Server:
dropped files:
C:\WINDOWS\Winnit32.exe 
C:\WINDOWS\SYSTEM\System32.exe 

size: 37.376 bytes

port: 1027, 8372 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices 
HKCR\exefile\shell\open\command 
c:\windows\win.ini "run"