Released in November 2005

Made in China

Server:
dropped files:
c:\WINDOWS\กก.exe      Size: 764,287 bytes 
c:\WINDOWS\smss.exe    Size: 764,287 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\E_60003\khk.dll       Size: 2,560 bytes 
c:\Documents and Settings\$user%\Local Settings\Temp\E_60003\rhmisc.dll    Size: 57,344 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Userinit"
old data: C:\WINDOWS\system32\userinit.exe, 
new data: C:\WINDOWS\system32\userinit.exe,กก, 

	
tested on Windows XP
January 02, 2006