Troj/VB-CYJ is a Trojan for the Windows platform.
When first run Troj/VB-CYJ copies itself to \sal.xls.exe and creates the following files:
\autorun.inf
<Windows>\ufdata2000.log
The following registry entries are set:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
MsServer
msfir80.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
IMJPMIG8.2
msime80.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL
CheckedValue
0