Written in C & Visual Basic

Released in march 2004

more versions

Server:

dropped files;
c:\WINDOWS\SYSTEM\socks.dll      size: 14.848 bytes 
c:\WINDOWS\SYSTEM\winhost32.exe  size: 21.504 bytes 

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "Windows Script Host"
data: winhost32.exe