Released in January 2009

Made in Tunisia

 

Server
Dropped File:
c:\WINDOWS\system32\Exploer.exe
Size: 112,847 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Winupdate"
Data: C:\WINDOWS\system32\Exploer.exe 



Tested on Windows XP
January 20, 2009