Spy
(Trojan-Spy.Win32.VB.agq)

by Israeli Soldier

Written in Visual Basic, Source included

Released in October 2007




Server
Dropped Files:
c:\WINDOWS\klass.exe       Size: 77,824 bytes 
c:\WINDOWS\MSWINSCK.OCX    Size: 109,248 bytes 
c:\WINDOWS\name

Startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Klass"
Data: C:\WINDOWS\klass.exe 


Tested on Windows XP
October 17, 2007

MegaSecurity