Written in Visual Basic, compressed with ASPack

Made in Brazil

dropped file:
c:\WINDOWS\system32\tmp.exe
size: 16.950 bytes 

port: 8886 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Setup"
data: %SysDir%\tmp.exe 


tested on Windows XP
January 03, 2005