Original name is unknown

Written in Visual Basic

Released in January 2005

more in this category

Dropped files:
c:\WINDOWS\system32\cpu.dll                  Size: 9,728 bytes 
c:\WINDOWS\system32\jDyqYGpbESF\csrss.exe    Size: 147,749 bytes 
c:\WINDOWS\system32\jDyqYGpbESF\csrss.ini    Size: 263 bytes 

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "load"
old data: 
new data: C:\WINDOWS\System32\jDyqYGpbESF\csrss.exe 
	
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "csrss"
data: C:\WINDOWS\System32\jDyqYGpbESF\csrss.exe 

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "run"
data: C:\WINDOWS\System32\jDyqYGpbESF\csrss.exe 	

attempts to connect to an IRC Server


tested on Windows XP
June 14, 2005