Compressed with ASPack

Released in february 2000

Server:
c:\WINDOWS\Windll32.exe 

size: 335.872 bytes 

port: 21 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Windll" 

added:
c:\WINDOWS\SYSTEM\MsDecay.scr 
c:\WINDOWS\SYSTEM\Msvsrv.exe 
c:\WINDOWS\SYSTEM\Register.exe 
c:\WINDOWS\SYSTEM\watching.dll