Made in Argentina

more versions

Server:
dropped files:
c:\WINDOWS\usr.dat              Size: 27 bytes 
c:\WINDOWS\SYSTEM\Rundll.exe    Size: 545.792 bytes 

port: 31320 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "RunDll"
data: RunDll.exe 

tested on Windows 98
February 13, 2006