From http://wiki.sans.org/tiki-index.php?page=DeloderWorm
" The Harbin Institute of Technology & Antiy United Cert Group has a good technical writeup . It covers files involved, registry keys modified, and how to kill off the worm."