Written in Visual Basic

Made in Brazil

Client:
values added:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run 
HKLM\Software\Microsoft\Windows\CurrentVersion\Run 
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices 


Server:
C:\WINDOWS\SYSTEM\LOOK SPY TROJAN.EXE 

size: 764 KB

port: 15000 TCP

startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run 
HKLM\Software\Microsoft\Windows\CurrentVersion\Run 
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices