Home Malware Programs Trojans Yusufali

Yusufali

Posted: March 28, 2006

Yusufali is a trojan that silently runs in background and monitors user activity analyzing titles of opened windows. If one of the titles contains specifc words, the trojan shows the following message in several languages:

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunloadserviceHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunsystem4224411avtimexp

Related Posts

Loading...