The basics:

The file is named taizi.exe located on the domain usa.ccxtt.com

It is saved to C:\explorer.exe and is executed from there.

it installs these files:

• c:\windows\system32\<randomly-generated-name>.dll - Trojan.PcClient-1603
  
• c:\windows\system32\drivers\<randomly-generated-name>.sys - Trojan.Dropper-10666
  
• taizi.exe - Unknown Dropper (Scanned; AV Did Not Warn)

Connects to Website (every 30 seconds) :
http://www.crackwg.net/pcshare/pc.txt
- [Contents of File = "59.34.148.248:7866"]

Also Attempts to Connect (Undetermined Amount of Time) :
http://59.34.148.248:7866/20080826/063853/753874.jsp (may be randomly generated)

I've added usa.ccxtt.com and crackwg.net to my hosts file so my pc can never reach that domain.

Win XP/Vista host file is found at C:\windows\system32\drivers\etc\hosts

Open it in Notepad and add these lines to it:

127.0.0.1  usa.ccxtt.com
127.0.0.1  crackwg.net

this tells your pc that those domains exist at your loopback address, so if a script (or browser, or anything) ever tries to access those domains, it will just be sending the requests to your own pc, rather than to the real sites.

more info here:

http://www.bluegartrls.com/forum/showpost.php?p=2182716&postcount=30

(click the link on the upper right of that page to view the whole discussion thread)

also from that thread, you will find instructions on how to check 100% if you are infected:

http://www.bluegartrls.com/forum/showpost.php?p=2183466&postcount=58

I dunno how many of y'all follow BG or other forums for this kinda thing so I wanted to pass it along.

Also, Seran loves the cock.