Spy Software 2.1
(Not detected by KAV on June 02, 2007)

by SoftWeb Team

Written in Delphi

Server is compressed with UPX

Released in August 2002





Server:
dropped files:
c:\WINDOWS\swserv.exe   size: 26.112 bytes 
c:\WINDOWS\swserv.dll 
c:\WINDOWS\system1st.dll 

port: 65505 TCP

startup:
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" 

MegaSecurity