Dj-Falcon Ps Rev.2
(Trojan-PSW.Win32.VB.it)

by Farzad Alizadeh

Written in Visual Basic

Released in November 2005



Server:
dropped file:
c:\WINDOWS\system32\explorer.exe
size: 19,069 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Microsoft"
data: C:\WINDOWS\System32\explorer.exe 



tested on Windows XP
October 05, 2006

MegaSecurity