Drops TEMP$01.EXE in \Windows and \Windows\System. It also drops TEMP#01.EXE in \Windows. These files should be deleted, as well as the registry key HKLM\Software\Microsoft\Windows\CurrentVersion\Run\"TEMP$01.task"