CmjSpy 1.8
(Backdoor.Win32.CmjSpy.18)

by cmjboy

Written in Delphi, compressed with UPX

Made in China

more versions




Server:
dropped files:
c:\WINDOWS\system32\cmjspyxp.exe      size: 286.720 bytes 
c:\WINDOWS\system32\hlicense.vxd      size: 0 bytes 
c:\WINDOWS\system32\systemdllxpc.vxd  size: 6 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "monitor"
data: cmjspyxp.exe 

tested on Windows XP
December 02, 2004
MegaSecurity