more versions

dropped files:
c:\WINDOWS\RUNDLL16.EXE size: 15,360 bytes 
c:\WINDOWS\temp.bat     size: 92 bytes 

port: 559 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows DLL Loader" 
data: C:\WINDOWS\RUNDLL16.EXE 




tested on Windows XP
February 01, 2005