Written in Visual Basic

Released in September 2003

Made in Brazil

more versions

Server:
dropped files:
c:\WINDOWS\SYSTEM\irxmwlob.exe    size: 140.934 bytes 
c:\WINDOWS\SYSTEM\NTSVC.ocx       size: 34.304 bytes 
c:\WINDOWS\SYSTEM\tdr_sub1.dll    size: 20.480 bytes 

port: 37546 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "irxmwlob"
data: irxmwlob.exe