Written in Visual C++

Released in April 2000

more versions

Email password sender
(ras and cache) passwords
includes  phone number, ip address,
dns address, win address, etc...


Server:
dropped file:
C:\WINDOWS\SYSTEM\WCheckUp.exe 

size: 52 KB

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "WCheckUp"