Written in Visual C++

Probably made in France

Server:
c:\WINDOWS\RUNDLLS.EXE 

size: 471.040 bytes

port: 666 TCP

startup:
c:\windows\win.ini, [windows] "load" 

added:
c:\WINDOWS\CLOSEW.BAT 
c:\WINDOWS\CLOSEW.PIF 
c:\WINDOWS\RUNDLLS.EXE 
c:\WINDOWS\SERV-U.INI 
c:\WINDOWS\win.ori
 
remark:
Serv-U based