Akosch Keylogger v2
(TrojanSpy.Win32.VB.m)

by akosch

Written in Visual Basic

Released in March 2003

Made in Germany

more versions


A PHP-site generate the HTML-sites, where the strings are.

The KeyLogger changes the startpage to:
http://www.akosch.com/test/test.php?page=old startpage&text=strings
 
If the startpage is called -> test.php saves the strings (-> generate the HTML-sites)

akosch


Server:
c:\WINDOWS\SYSEDIT.EXE 

size: 36.864 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "sysedit" 

changed:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main "Start Page" 

MegaSecurity