Orkut Keylogger v2
(Trojan-Spy.Win32.Banbra.hp)

by Rafael Marcondes

Written in Delphi

Released in July 2007

Made in Brazil

more versions




Server:
dropped files:
c:\WINDOWS\system32\disk10.exe    Size: 8,838,144 bytes 
c:\WINDOWS\system32\key55.ini     Size: 10 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "msig"
data: C:\WINDOWS\System32\disk10.exe 




tested on Windows XP
July 25, 2007

MegaSecurity