Written in Visual Basic, Source included

Released in November 2007

more versions

Server
Dropped Files:
c:\WINDOWS\system32\fwbmz.dll      Size: 34,816 bytes 
c:\WINDOWS\system32\svch0st.exe    Size: 97,128 bytes 
c:\WINDOWS\system32\win.bat        Size: 56 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run "WinDrv"
Data: C:\WINDOWS\system32\svch0st.exe 


Tested on Windows XP
December 13, 2007