The name "winker" is derived from "WinKernal"

Written in Visual C++

Released in october 2003

Made in China

more versions

Backdoor.Winker.m:

dropped files:
c:\WINDOWS\SYSTEM\hello.exe     size: 35.328 bytes
c:\WINDOWS\SYSTEM\iexplore.dll  size: 35.328 bytes

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "systhread"
data: C:\WINDOWS\SYSTEM\hello.exe