Written in C

Released in July 2005

dropped files:
c:\WINDOWS\4532\lsass.exe       Size: 61,440 bytes 
c:\WINDOWS\4532\winlogon.exe    Size: 93,184 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "RestoreSystem"
data: C:\WINDOWS\4532\winlogon.exe 

tested on Windows XP
July 13, 2005