i think the importaint thing here is that this was dropped via an lsass exploit, not that it is a specific type of viral agent ( agobot ) included in the drop.
for those interested in a sample, it may be obtained at http://exploit.nothackers.org/msiwin84-lsass.zip morning_wood http://exploitlabs.com _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
