dropped file: 
C:\WINDOWS\ARSD.EXE 

port: 80 TCP

size: 33 KB

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run