Written in Visual Basic, compressed with FSG

Released in July 2006

Server:
dropped file:
c:\WINDOWS\Taskmon .exe
size: 26,872 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
data: Explorer.exe Taskmon .exe 




tested on Windows XP
July 27, 2006