Fake login screen emulating the normal Windows login screen. Logs username / password to a file. Requires the capability to install binaries on the affected system in the first place, and messages are apparently based on those in the Australian edition of Windows XP (so it would need to be modified if you plan on running this elsewhere without immediate detection).
d0e6171f9bc96f7e44e1752c58db80c238324b71b62fb1c4a65d507f4df203af