Made in Visual Basic

dropped files:
C:\WINDOWS\system\winrun32.exe    Size: 40 KB
C:\Logo.sys 
C:\WINDOWS\Winstart.bat 


startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce "Windows"