Computer Spy
(Trojan-Spy.Win32.Faisal.a)

by Hirosh

Compressed with UPX

Released in August 2002


Server:
dropped files:
c:\WINDOWS\SPOOL32.EXE     size: 26.112 bytes 
c:\WINDOWS\winfile32.dll   size: 0 bytes 
c:\WINDOWS\winfile64.dll   size: 28.672 bytes 
c:\WINDOWS\winfileb32.dll  size: 0 bytes 

startup:
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" 

MegaSecurity