Ptsnoop (c)
(Backdoor.Win32.Ptsnoop.c)

by ?

Written in Visual Basic

Probably made in Malaysia

more versions


dropped file:
c:\WINDOWS\SYSTEM\ptsnoop.exe
size: 40.960 bytes 

startup:
c:\windows\win.ini, [windows] "load"
old value: 
new value: C:\WINDOWS\system\ptsnoop.exe 



tested on Windows 98
January 27, 2005

MegaSecurity