Written in Visual Basic

Released in June 2003

more versions

Installer:
size: 188.460 bytes

server:
C:\WINDOWS\TEMP\SERVER.exe 

size: 65.536 bytes 

port: 4563, 4564, 4565, 4566, 4567 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Poltergeist" 

added:
c:\WINDOWS\TEMP\Trainwreck.dll