Written in Delphi

Backdoor.Win32.Spyman:
dropped file:
c:\WINNT\Windll.exe 

size: 491.520 bytes

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "dllMem"

tested on win2000