Written in Visual Basic

Released in May 2007

Made in Iran

c:\WINDOWS\system\lsass.exe
Size: 19,141 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
Old data: Explorer.exe 
New data: Explorer.exe C:\WINDOWS\system\lsass.exe 


Tested on Windows XP
October 01, 2007