WPS 1.3
(Constructor.Win32.VB.cj)
(Trojan-PSW.Win32.YahooPass.t for Server)

by W32_Cr4Ck3r

Written in Visual Basic

Released in January 2008

Made in Iran

more versions





Server
Dropped File:
c:\WINDOWS\system32\regsvr.exe
Size: 32,909 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "C:\WINDOWS\System32"
Data: C:\WINDOWS\System32\regsvr.exe  



Tested on Windows XP
January 08, 2008

MegaSecurity