Win-Spy 8.8 build 137

Released 17 years, 9 months ago. December 2006

Copyright © MegaSecurity

By BC Computing


Win-Spy 8.8 build 137
Informations
Author BC Computing
Family Win-Spy
Category Remote Access
Version Win-Spy 8.8 build 137
Released Date Dec 2006, 17 years, 9 months ago.
Language Visual Basic
Additional Information
Remote Install File:
dropped files:
c:\WINDOWS\zip\csrss.exe       Size: 102,912 bytes 
c:\WINDOWS\zip\services.exe    Size: 118,272 bytes 
c:\WINDOWS\comp.exe            Size: 28,672 bytes 
c:\WINDOWS\hpeg.dll            Size: 69,120 bytes 
c:\WINDOWS\msimn.exe           Size: 57,344 bytes 
c:\WINDOWS\msn64.exe           Size: 50,176 bytes 
c:\WINDOWS\refsdm.dll          Size: 26 bytes 
c:\WINDOWS\srvcsr.dll          Size: 57,344 bytes 
c:\WINDOWS\taskmgr.exe         Size: 81,408 bytes 
c:\WINDOWS\winup32.exe         Size: 64,512 bytes 
c:\WINDOWS\ziplog.txt

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "NAVUpdater"
data: C:\WINDOWS\zip\csrss.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "NAVUpdater32"
data: C:\WINDOWS\zip\services.exe 


tested on Windows XP
January 26, 2007

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.