KVM 1.0
(Trojan-PSW.Win32.Prostor.h)

by Katebzadeh

aka Kateb Virus Maker

Written in Visual Basic

Released in July 2007

Made in The Middle East


Server
Dropped File:
c:\WINDOWS\system32\Explorer.exe
Size: 16,384 bytes 

Startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "MGSMGS"
Data: C:\WINDOWS\System32\Explorer.exe 




Tested on Windows XP
September 30, 2007

MegaSecurity