Home Malware Programs Worms Yusufali.b

Yusufali.b

Posted: March 28, 2006

Yusufali.b is a worm that spreads through floppy disks in infected executables. The spyware is designed to silently run in background and monitor user activity analyzing titles of opened windows. If one of the titles contains specific words, the trojan shows the following message:

File System Modifications

  • The following files were created in the system:
    # File Name
    1 documents.exe
    2 systemdll.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunsystem4224411=%System%systemdll.exe
Loading...