Virus Found: Trojan.Dropper (Symantec), Win32/Heur (AVG), TR/Crypt.FKM.Gen (AntiVir), Mal/EncPk-EE (Sophos)
On the VirusTotal website, only 20 out of 40 AV detected it (details).
The Trojan will modify the PCIDump service, add several .sys files such as acpiec.sys into your C:\Windows\system32 folder. It will also copy itself and add a autorun.inf to C:\. Phpi.dll will be added into C:\Windows folder.
It changes the Hosts file and try to connect to www.cvbasefwdase.cn via HTTP to download other files. Likely to be trying to download more malicious payload.
For more details on my finding, visit W01f Labs - Malware Analysis: Trojan.Dropper