Made in China

Server
Dropped File:
c:\WINDOWS\system32\mm.exe 
Size: 20,992 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AS231211-D82W-11cf-64CD-31FFAFEECF20} "StubPath" 
Data: C:\WINDOWS\system32\mm.exe 




Tested on Windows XP
Narch 09, 2009