Written in Visual Basic

Released in April 2005

Made in Italy

Server:
dropped file:
c:\WINDOWS\MSWINTYRGQ.exe
size: 94,208 bytes 

port: 111 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SecurLoad"
data: C:\WINDOWS\MSWINTYRGQ.exe 




tested on Windows XP
August 25, 2006