by Pyrox aka Affix
Written in Visual Basic
Released in April 2007
Server dropped files: c:\WINDOWS\winApi.exe Size: 225,280 bytes c:\WINDOWS\system32\zlib.dll Size: 53,248 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Windows API Manager "StubPath" data: C:\WINDOWS\winApi.exe tested on Windows XP April 13, 2007MegaSecurity