Written in Microsoft Visual C++

Released in March 2005

Made in China

more versions

Winter Love

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 
                                   


Server:
dropped file:
c:\WINNT\system32\server.exe
size: 98,736 bytes 

port: 3043 TCP

added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MYSRVSHELL
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MySrvShell
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYSRVSHELL
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MySrvShell



tested on Windows 2000
May 19, 2005