Released in March 2008

Server
Dropped File:
c:\WINDOWS\Help\4112SVCHOST.EXE
Size: 41,126 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{Y479B6D0-OTRW-U5GH-S1EE-E0AC10B4E9942114} "StubPath"
Data: C:\WINDOWS\help\4112SVCHOST.EXE -tx 	
	
	
Tested on Windows XP
March 14, 2008