SpyMon 1.0.0.28
(Backdoor.Win32.DataSneak.a)

by RetroCoder

Written in Assembler

more versions





dropped file:
c:\WINDOWS\system32\vcp.exe
size: 10,240 bytes 

port: 6009 TCP



tested on Windows XP
March 06, 2006

MegaSecurity