Released in May 2009

Server
Dropped Files:
c:\WINDOWS\csrss.exe
Size: 1,535,768 bytes 

c:\WINDOWS\svchost.exe
Size: 1,568,768 bytes 


Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "svchost"
Data: C:\WINDOWS\svchost.exe 


Tested on Windows XP
May 05, 2009