Y!Foe
(Constructor.Win32.Agent.cq)
(Trojan-Downloader.Win32.Agent.hew)

by RedJoker

Released in May 2007

Made in Rumania


Server:
dropped files:
c:\WINDOWS\yfoe.exe     Size: 8,941 bytes 
c:\WINDOWS\yfoe.html    Size: 19,637 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "(Default)"



tested on Windows XP
May 31, 2007

MegaSecurity