I did some more testing, and launched the 'infected' installer with taskmanager running and sure enough, lsas32.exe appeared in the process table.

Dubious.

Fortunately, you are able to kill the process with no repercussions. I tried to find the startup registry entry for the program that is listed in msconfig, but it's not there. This does not bode well.