Written in Visual Basic

Released in January 2007

Made in Morocco

Server:
c:\WINDOWS\winlogon.exe           Size: 278,948 bytes 
c:\WINDOWS\system32\Kernel.bat    Size: 7,552 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Logon Application"
data: C:\WINDOWS\winlogon.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices "Windows Logon Application"
data: C:\WINDOWS\winlogon.exe 




tested on Windows XP
July 27, 2007