Released in December 2001

Made in Russia

Server can kill some firewalls



Server:
dropped file:
C:\WINDOWS\SYSTEM\.EXE

size: 176,640 bytes

startup:
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNSERVICES
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN