ProAgent 1.1
(Trojan-Spy.Win32.ProAgent.11)

by ATmaCA

Written in C++

Released in July 2003

Made in Turkey

more versions


What's new
-----------------------------------
 '+' = New feature
 '-' = Bug fixed or Removed
 '*' = Improved or Changed
-----------------------------------

===================================
Version 1.1   
2/6/03
===================================

+ Added support for Icq2003a/Lite Passwords.

ATmaCA


Server:
dropped files:
c:\WINDOWS\SYSTEM\Driver_32.exe 
c:\WINDOWS\SYSTEM\CRSS.EXE 
c:\WINDOWS\SYSTEM\Decrypt.dll 
c:\WINDOWS\SYSTEM\Driver_32.exe 
c:\WINDOWS\SYSTEM\DXSERVICE.EXE 
c:\WINDOWS\SYSTEM\ekran_g.jpg 
c:\WINDOWS\SYSTEM\iss32.exe 
c:\WINDOWS\SYSTEM\kayit2.bat 
c:\WINDOWS\SYSTEM\kdd32.atm 
c:\WINDOWS\SYSTEM\kt.atm 
c:\WINDOWS\SYSTEM\ktd32.atm 
c:\WINDOWS\SYSTEM\outl.atm 

port: 110 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{7TF52A52-394A-11d3-B153-00707897TT} "StubPath" 
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" 

MegaSecurity