Sharp Spy 1.0
(Trojan-Spy.Win32.VB.tu)

by Sharp Soft

Written in Visual Basic

Released in September 2007


Server:
Dropped File:
c:\WINDOWS\system32\IEXPL0RE.EXE
Size: 30,315 bytes 

Added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "System"
Data: IEXPL0RE.EXE 

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_RASMAN\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TAPISRV\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\l
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RASMAN\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TAPISRV\0000\Control
	
	
	
Tested on Windows XP
October 20, 2007

MegaSecurity