aka NetSpy

Written in Microsoft Visual C++

Made in China

more versions

Server:
dropped file:
c:\WINDOWS\SYSTEM\netspy.exe
size: 64.000 bytes 
 
port: 7306 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "NETSPY"
data: c:\windows\system\netspy.exe 

 
tested on Windows 98
November 2, 2004