SPYWARE: Yuri 1.2
This signature detects the runtime behavior of the spyware Yuri 1.2. Yuri is a powerful RAT that allows remote control of a PC anywhere in the world. It is plugin based and uses reverse connection only. Once the system is compromised, it can shutdown the victim's system, captures keylogs and screens, opens messenger and sends victim messages, and changes system settings.
Short Name
SPYWARE:TROJAN:YURI-1-2
Severity
Major
Recommended
False
Recommended Action
None
Category
SPYWARE
Keywords
1.2 Yuri
Release Date
12/14/2007
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
Port
TCP/7898
False Positive
Unknown