Simo Spy 1.1
(Trojan-Spy.Win32.VB.zf)
(Trojan-Spy.Win32.VB.blg for Server)

by sina mohammadi

Written in Visual Basic

Released in January 2008

Made in Iran

more versions 





Server
Dropped Files:
c:\WINDOWS\system32\msm32.exe            Size: 80,703 bytes 
c:\WINDOWS\system32\regsvr.exe           Size: 80,703 bytes 
c:\WINDOWS\system32\YMSG12ENCRYPT.dll    Size: 51,714 bytes  

Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Task Manager"
Data: C:\WINDOWS\system32\msm32.exe  



Tested on Windows XP
September 03, 2008
MegaSecurity