sharK 0.30
(Backdoor.Win32.VB.awr)
(Backdoor.Win32.VB.aym for Server)
(Sniffer.Win32.VB.c for Client)
(not-a-virus:PSWTool.Win32.PassView.b)
(not-a-virus:PSWTool.Win32.Messen.106)

by sNiper109

Written in Visual Basic

Released in September 2006

more versions

 


Server:
dropped files:
c:\WINDOWS\mswinsck.ocx    Size: 108,336 bytes 
c:\WINDOWS\scvhost.exe     Size: 462,047 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Update"
data: C:\WINDOWS\scvhost.exe 


tested on Windows XP
October 02, 2006

MegaSecurity