MHacker-PS 1.0
(Trojan-PSW.Win32.VB.kz)

by moud Baghani & Siavash

Written in Visual Basic

Released in July 2007

Made in Iran




Server
Dropped File:
c:\WINDOWS\system32\NortonAVS.exe
Size: 60,635 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "(Default)"
Data: C:\WINDOWS\System32\NortonAVS.exe 




Tested on Windows XP
February 17, 2008

MegaSecurity