Written in C

Released in September 2004

more versions

Backdoor.Win32.Loony.n:

dropped file:
c:\WINNT\system32\lsasss.exe  size: 40.417 bytes
 
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "MPL32 Driver"
data: lsasss.exe

tested on Win2000