Written in Delphi

Released in November 2006

Made in China

Server:
Dropped files:
c:\WINDOWS\Help\YhbShell.chm
size: 22,644 bytes 

c:\WINDOWS\Help\YhbShell.dll
size: 29,231 bytes 
	
added to registry:	
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services "Start"
data: 02, 00, 00, 00 

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Parameters "ServiceDll"
data: C:\WINDOWS\help\YhbShell.dll 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services "Start"
data: 02, 00, 00, 00 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Parameters "ServiceDll"
data: C:\WINDOWS\help\YhbShell.dll 

	
Tested on Windows XP
November 20, 2006