Trojan Advice Please

Hi all,

I found a trojan on a users system because it was broadcasting to the
network like mad trying to find a way to the internet. It had opened
lots of listening connections on various ports.

The file causing this was a 93 Kb Win32 Portable Executable in
\windows\system32 with the usual HKLM\....\Run , RunOnce etc. keys
affected.

NO virus checkers are finding this as anything dodgy..

I didn't have much time to spend on the infected system, So I cleaned
it up and took a copy of the file.

My question is, why can I not get it to run on any other system ? It
just reports '...not a valid win32 program'.

Is it likely that this thing had other components - right at the end
of the file (if viewed in a hex editor) is the text 'kernel32.dll'.

At the start it has MZP ...bla bla This program must be run under
win32

Any thoughts much appreciated.

Craig