Written in C

Released in November 2004

more versions

Backdoor.Win32.Loony.m:

dropped file:
c:\WINDOWS\system32\sys32.exe
size: 30.278 bytes 
 
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "api driver"
data: sys32.exe

does (try to) connect to an IRC server

tested on Windows XP
08 November, 2004