NetSpy 0.6.98 build A

NetSpy 0.6.98 build A
(Backdoor.Win32.Netspy.06)

by sXi Soft

Written in Delphi

Released in April 2000





Server:
dropped file:
c:\WINNT\system32\system.exe
size: 312.320 bytes

port: 1024 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "SysProtect"
data: C:\WINNT\system32\system.exe 
 
tested on Windows 2000

MegaSecurity