by dem0nseed
Written in Visual Basic
Released in December 2001
Server: dropped file: c:\WINDOWS\system\REGDLL32.EXE size: 57,344 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinROOT" data: c:\windows\system\REGDLL32.EXE tested on Windows XP December 12, 2005MegaSecurity