Written in Visual Basic

Made in Germany

Server:
dropped file:
c:\windows\winipdfg.exe 

size: 56 KB

startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "Service" 
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce "Service"