Real name is unknown

Written in Delphi, packed with UPX

Probably made in Brazil

more in this category

dropped file:
c:\WINDOWS\system32\winsys\instalado.txt
size: 429 bytes 

added to registry:	
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Kernell XP"
data: C:\WINDOWS\System32\Sistem.exe 	

HKEY_LOCAL_MACHINE\SOFTWARE\Sos



tested on Windows XP
February 24, 2005