Released in September 2008

more versions

Server
Dropped File:
c:\WINDOWS\system32\Restore\svchost.exe
Size: 184,330 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Update"
Data: C:\WINDOWS\system32\Restore\svchost.exe 
	
	

Tested on Windows XP
October 27, 2008