aka NetSpy

Written in Microsoft Visual C++

Released in December 1998

Made in China

more versions

Server:
dropped file:
c:\WINNT\system32\netspy.exe
size: 141.312 bytes
 
port: 7306, 7307, 7308 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "netspy"
data: netspy.exe
 
tested on Windows 2000