Spy Iran 1.0
(Not detected by KAV on August 15, 2007y)

by ?

Released in August 2007

Written in Delphi



Server
dropped files:
c:\WINDOWS\system\Server.exe
size: 398,336 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Microsofter"
data: C:\WINDOWS\system\Server.exe 




tested on Windows XP
August 15, 2007

MegaSecurity