KGB KeySpy 2.0 demo
(Trojan-Spy.Win32.KGSpy.a)

by 500mhz

Released in December 2004

Made in Russia

more versions


Server:
dropped files:
c:\Documents and Settings\%user%\Local Settings\Temp\black32.dll
size: 6,144 bytes 

c:\Documents and Settings\%user%\Local Settings\Temp\setup_.exe
size: 9,216 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "load"



tested on Windows XP
March 25, 2005

MegaSecurity