Server:
dropped file:
c:\WINDOWS\SYSTEM\winsys.exe 

size: 13.824 bytes 

port: 113 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Windows" 

additional information:
Tries to connect to specified IRC server and joins a channel to listen for commands 
Used for DDOS attacks