Yakoza_Archive_Spy
(not-a-virus:Monitor.Win32.VB.j)

by Ali Moazemi

Written in Visual Basic

Released in February 2007

Made in Iran

more versions


Server:
c:\WINDOWS\system\SVCHOST.EXE
Size: 77,958 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SystemFile"
Data: C:\WINDOWS\system\SVCHOST.EXE 




Tested on Windows XP
January 23, 2008

MegaSecurity