Yahoo Spy 3.0
(Trojan-Spy.Win32.VB.bcd)
(Trojan-Spy.Win32.VB.bcf)

by BUNN

Released in March 2008

more versions

 


Server
Dropped File:
c:\WINDOWS\system\svchost.exe
Size: 151,633 bytes 

Added to Registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "NMediaCenter"
Data: "C:\WINDOWS\system\svchost.exe" 



Tested on Windows XP
December 31, 2008

MegaSecurity