Very cool. I do not believe that I have looked at this in quite a while - I'm not exactly a reverse-engineering guy. But I do like to poke and prod at malware occasionally, especially when it has annoyed someone I love. Thanks for another fine article!

I had a little snicker at this, though:

...icons for a few GUI tools installed on REMnux the analyst will likely use frequently: xterm (terminal shell)...

The terminal emulator is the CLI.

Happy Christmas!