Written in Visual Basic

Released in September 2006

more versions

 

Server:
dropped file: 
c:\WINDOWS\system32\Knrl32.exe
size: 36,926 bytes 

startup:
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)"
old data: "%1" %* 
new data: Knrl32.exe opext "%1" %* 




tested on Windows XP
September b18, 2006