GOP 1.2
(Trojan-PSW.Win32.GOPtrojan.12)
(Trojan-Dropper.Win32.FC.a)

by ?

Compressed with UPX

Released in January 2001

Made in China

more versions


Server:
dropped files:
c:\WINDOWS\SYSTEM\sysexhook.exe    size: 42.647 bytes 
c:\WINDOWS\SYSTEM\gHookDll.dll 

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "WindowsAgent" 

MegaSecurity