Written in Visual Basic

Released in March 2006

Made in Belgium

more versions

Server:
dropped file:
c:\WINDOWS\system32\microsoft.exe
size: 192,512 bytes 

port: 1221, 1234, 1456, 6666, 6677, 6679, 6689, 6699, 6642, 6613, 6644, 6014, 6429, 6589, 6742, 6333, 6953, 6777, 6657, 6963, 6943, 6465, 6221 TCP

added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Microsoft"
data: C:\micro\server.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Microsoft"
data: C:\micro\server.exe 



tested on Windows XP
March 29, 2006