Written in Visual Basic

Released in 2001

more versions

Server:
dropped file:
c:\WINDOWS\system\REGDLL32.EXE
size: 90,112 bytes 

port: 8723 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinROOT"
data: c:\windows\system\REGDLL32.EXE 


tested on Windows XP
February 20, 2006