Yakoza_PS
(Trojan-PSW.Win32.VB.la)

by Ali Moazemi

Written in Visual Basic

Released in October 2007

Made in Iran

more versions


Server:
Dropped File:
c:\WINDOWS\Help\svchost.exe
Size: 57,549 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SystemFile"
Data: C:\WINDOWS\help\svchost.exe 


Tested on Windows XP
December 16, 2007

MegaSecurity