a few registry keys for refere
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersion
Run "System Service" = C:WINDOWSSYSTEMMSREXE.EXE
Several other keys are created:
HKEY_LOCAL_MACHINESystemCurrentControlSetServices
Swartax "ImagePath" = C:WINDOWSSYSTEMMSREXE.EXE
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersion
Welcome "%random values%" = "%random data%"
check http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=99793