Client:
client is a dropper of:
c:\WINDOWS\updater.exe  (9 KB)
c:\ill.exe              (9 KB) 

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run 



Server:
c:\WINDOWS\MicroLog.exe 

size: 9 KB

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run