by WSM/FHM
Released in January 2007
Written in Visual Basic
Server dropped file: c:\WINDOWS\system32\regsvr.exe size: 23,179 bytes startup: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "regsvr" data: C:\WINDOWS\System32\regsvr.exe tested on Windows XP January 27, 2007MegaSecurity