Ps-G 1.3

Ps-G 1.3
(Worm.Win32.VB.qh for psg Keylogger.exe)
(Trojan-Dropper.Win32.Delf.tx for VB6FR.DLL)
(Trojan-Spy.Win32.Kirahu.ab for Server)

by Toxic_Frog

Written in Visual Basic

Released in July 2007




Server
Dropped File:
c:\WINDOWS\SVCHOST.EXE
Size: 31,232 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SVCHOST"
Data: C:\WINDOWS\SVCHOST.EXE 




Tested on Windows XP
April 02, 2008

MegaSecurity