PassStealer 1.6
(not-a-virus:PSWTool.Win32.PassView.bv)

by d1ng0d0gt0r & J3fr

Written in Visual Basic

Released in September 2006

Made in Germany

more versions


Server
dropped files:
c:\WINDOWS\ALGK.BAT                         Size: 704 bytes 
c:\WINDOWS\svchost.exe                      Size: 1,519,891 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AviraAntiVir-Driver"
data: C:\WINDOWS\svchost.exe -s 




tested on Windows XP
March 06, 2007

MegaSecurity