Written in

Released in January 2009

Server
Dropped Files:
c:\WINDOWS\SYSDIR54.exe           Size: 45,156 bytes 
c:\WINDOWS\system32\norton.exe    Size: 45,156 bytes 
c:\WINDOWS\system32\norton.txt    Size: 169 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "norton.exe"
Data: c:\windows\system32\norton.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SYSDIR54.exe"
Data: c:\windows\SYSDIR54.exe 



Tested on Windows XP
January 13, 2009