Released in December 2007

Made in Russia

 

Server

Server:
Dropped Files
c:\WINDOWS\system32\ntserv32.dll    Size: 22,528 bytes 
c:\WINDOWS\system32\svcmon.com      Size: 234,560 bytes 

Port: 9666 TCP

Added to Registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "run"


Tested on Windows XP
June 30, 2008