YP-Sender 2.0
(Trojan-PSW.Win32.Yahoo.VB.s)
(Trojan-PSW.Win32.Yahoo.VB.t)

by Hossein, Kourosh & Shadow

Written in Visual Basic

Released in July 2008


Server
Dropped File:
c:\WINDOWS\system32\Sys32.exe
Size: 60,047 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Update"
Data: C:\WINDOWS\system32\Sys32.exe 




Tested on Windows XP
July 14, 2008

MegaSecurity