Written in Visual Basic, compressed with Petite

Released in April 2003

more versions

Server:
dropped files:
c:\WINDOWS\SYSTEM\win32hlp.exe    size: 41.984 bytes 
c:\WINDOWS\SYSTEM\WinRunHelp.wrh  size: 4 bytes 

port: 4881, 5885 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "win32hlp"
data: C:\WINDOWS\SYSTEM\WIN32HLP.exe 

HKEY_CLASSES_ROOT\Windows Runtime Help 4.881.1208\shell\open\command "(Default)"
data: C:\WINDOWS\SYSTEM\WIN32HLP.exe 
	
tested on Windows 98
November 18, 2004