IE-AU PS 1.3.5

Copyright © MegaSecurity

By Pwin pooya


IE-AU PS 1.3.5
Informations
From The Middle East
Author Pwin pooya
Family IE PS
Category Information Stealer
Version IE-AU PS 1.3.5
Language Visual Basic
Additional Information
Server:
dropped files:
c:\WINDOWS\system32\regsvr.exe
size: 31,232 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "regsvr.exe"
data: C:\WINDOWS\System32\regsvr.exe sysdir 	




tested on Windows XP
May 07, 2006

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.