Spy Agent 1.2

Released 17 years, 4 months ago. July 2007

By AliCaNelKa

Informations

From	Turkey
Author	AliCaNelKa
Family	Spy Agent
Category	Information Stealer
Version	Spy Agent 1.2
Released Date	Jul 2007, 17 years, 4 months ago.
Language	Delphi

Additional Information

Server
Dropped Files:
c:\WINDOWS\Amcam13.ini     Size: 14 bytes 
c:\WINDOWS\ayar.ini        Size: 105 bytes 
c:\WINDOWS\openssl.cnf     Size: 9,374 bytes 
c:\WINDOWS\services.ini    Size: 99 bytes 
c:\WINDOWS\winlogon.exe    Size: 426,102 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "System"
Data: \windows\winlogon.exe 




Tested on Windows XP
September 25, 2007

Author Information / Description

Password Stealer for
  
    * MSN Messenger
    * Windows Messenger (In Windows XP)
    * Windows Live Messenger (In Windows XP And Vista)
    * Yahoo Messenger (Versions 5.x and 6.x)
    * Google Talk
    * ICQ Lite 4.x/5.x/2003
    * AOL Instant Messenger (only older versions, the password in newer versions of AIM cannot be recovered)
    * AOL Instant Messenger/Netscape 7
    * Trillian
    * Miranda
    * GAIM