Written in Visual Basic

Released in December 2006

Server:
dropped file:
c:\WINDOWS\system32\hrt.exe
size: 72,493 bytes 

port: 8814, 1488, 6988 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "hrt"
data: c:\WINDOWS\system32\hrt.exe 




tested on Windows XP
March 24, 2007