Gobo's Remote Keylogger
(Trojan-Spy.Win32.Keylogger.ay)

by Gobo

Written in Visual Basic

Released in March 2003




Server:
dropped file:
c:\WINDOWS\SYSTEM\Internet Explorer.exe 

size: 73.728 bytes 

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "(Default)" 

MegaSecurity