Net Antrax 0.9.6
(Trojan-Spy.Win32.KeyLogger.ah )

by ?

Written in Visual Basic

Released in October 2002

Made in Brazil

more versions

 


Server


Server:
dropped files:
c:\WINDOWS\installsd.exe             Size: 12,288 bytes 
c:\WINDOWS\system32\rundll32a.exe    Size: 23,552 bytes 

added to registry:
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\Rundll32a\Rundll32a
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_STISVC\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_STISVC\0000\Control


tested on Windows XP
December 20, 2005

MegaSecurity