Lord Msn Spy 2.0
(Trojan-Spy.Win32.VB.gd)

by Lympex

Written in Visual Basic

Released in March 2005




dropped files:
c:\WINDOWS\system32\Log.log

c:\WINDOWS\system32\msnmsgr.exe
size: 213,555 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "MsnMsgr"
data: C:\WINDOWS\System32\msnmsgr.exe 



tested on Windows XP
May 20, 2005

MegaSecurity