NinjaSpy Trojan (a)
(Backdoor.Win32.NinjaSpy.a)

by NinjaSpy

Written in Delphi, compressed with UPX

Released in January 2002

Made in Brazil

more versions


Server:
C:\WINDOWS\SYSTEM\Wsock.bat 

size: 165.378 bytes 

port: 2002, 2003 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "MsDos" 

MegaSecurity