ClipBanker malware masquerading as Winamp media player, stored in C:\Users\Administrator\Saved Games\ and persisted via registry Run key.