Der Spaeher 2.0
(Backdoor.Win32.DerSpeher.2 for Client) (Backdoor.Win32.DerSpeher.3.a for Server)

by Mario Parzer

Written in Visual Basic

Released in May 2000

Made in Germany

more versions




Server:
C:\WINDOWS\System\dkbdll.exe 
c:\WINDOWS\COMMAND\Mome.exe 

size 229.888 bytes

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Explore" 
c:\windows\win.ini,  "run" 

Added:
c:\WINDOWS\COMMAND\Mome.exe 
c:\WINDOWS\SYSTEM\aBoota.bat 
c:\WINDOWS\SYSTEM\dkbdll.exe 
c:\WINDOWS\SYSTEM\Gci32q.dll 

Changed:
c:\AUTOEXEC.BAT 
(call to aBoota.bat is added)

MegaSecurity