Yup.. i was just looking at this, it also drops WINSTT32.dat in the winnt folder. it's a configuration file along with the following registry keys to hook up the system.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
"TrayX" = C:\WINNT\WINPPR32.EXE /sinc
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run
"TrayX" = C:\WINNT\WINPPR32.EXE /sinc
http://vil.nai.com/vil/content/v_100561.htm
the latest stinger that was posted today should have the remedy for it
you could get this from the link below.
http://vil.nai.com/vil/stinger/