Spy Yahoo 1.1
(not-a-virus:Monitor.Win32.VB.a)

by Ali Moazemi

Written in Visual Basic

Released in December 2007

more versions






Server
Dropped Files:
c:\WINDOWS\Help\kernal32.exe
Size: 73,910 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SystemFile"
Data: C:\WINDOWS\help\kernal32.exe




Tested on Windows XP
December 23, 2007

MegaSecurity