more versions

Server:
dropped file:
C:\WINDOWS\SYSTEM\WINDOW.EXE

size: 1429 KB

startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run