Released in August 2006

Made in Syria

more versions

Server:
dropped files:
c:\WINDOWS\CSRSS.exe    Size: 34,419 bytes 
c:\WINDOWS\d.cmd        Size: 113 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "task manager"
data: C:\WINDOWS\CSRSS.exe 




tested on Windows XP
October 06, 2006