Written in Visual Basic, compressed with UPX

Released in 2002

dropped files:
c:\WINDOWS\system32\MSODBC32.EXE    size: 24.576 bytes 
c:\WINDOWS\system32\odbc32ms.dat    size: 4.034 bytes 

port: 51357 TCP

added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AFD\Parameter "DisableRawSecurity"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Microsoft ODBC Database Linker\Security
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\A
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AFD\Parameter
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Microsoft ODBC Database Linker\Security

tested on Windows XP
December 06, 2004