Sophos

Troj/Yar-A

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Included in our products from July 2007 (4.19)
Protection available since 25 May 2007 02:27:48 (GMT)
Last updated 25 May 2007 07:00:45 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Yar-A is a Trojan for the Windows platform.

Once installed Troj/Yar-A creates the files:

<Temp>\dld_2urls_dd3_nonpack_rpolycrypt.exe - detected as Troj/Yar-A.
<Temp>\pirate_alert.exe - non malicious file that can be safely removed.

The file <Temp>\pirate_alert.exe is then run and will display a fake error message with the title "Unsupported MPEG Codec Error: Pirates of the Caribbean: At World's End" and the message "Unsupported MPEG Codec Error: Pirates of the Caribbean: At World's End. Go to official web site: <URL link>".

Troj/Yar-A may be spammed out via email as an zip attachment with the subject lines:

"Pirates of the Caribbean: At World's End -- The Official Trailer"
"Pirates of the Caribbean 3"
<no subject line>

The message body may also contain a brief synopsis of the movie.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer