Win-Spy 8.7 Build 1.04

Released 18 years, 6 months ago. March 2006

Copyright © MegaSecurity

By BC Computing


Informations
Author BC Computing
Family Win-Spy
Category Remote Access
Version Win-Spy 8.7 Build 1.04
Released Date Mar 2006, 18 years, 6 months ago.
Language Visual Basic
Additional Information
Server:
dropped files:
c:\WINDOWS\msn32.exe            Size: 66,048 bytes 
c:\WINDOWS\OutlookExpress.exe   Size: 37,376 bytes 
c:\WINDOWS\taskmgr.exe          Size: 78,848 bytes 
c:\WINDOWS\winup32.exe          Size: 64,512 bytes 
c:\WINDOWS\winusers.exe         Size: 27,648 bytes 
c:\WINDOWS\winvid.exe           Size: 41,984 bytes 
c:\WINDOWS\ziplog.txt           Size: 5,615 bytes 
c:\WINDOWS\data\csrss.exe       Size: 74,240 bytes 
c:\WINDOWS\data\services.exe    Size: 117,248 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\YahooMessenger

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "YahooMessenger"
data: C:\WINDOWS\data\csrss.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "YahooMessenger32"
data: C:\WINDOWS\data\services.exe 



tested on Windows XP
March 29, 2007

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.