Spying King 2.0
(Backdoor.Win32.SpyKing.a)
(Backdoor.Win32.SpyKing.b)
(Backdoor.Win32.SpyKing.c)
(Backdoor.Win32.SpyKing.d)

by GUDI

written in Visual Basic

Released in February 2000

more versions




Server:
dropped files:
c:\WINDOWS\SYSTEM\Dgs.exe     size: 209.922 bytes 
c:\WINDOWS\SYSTEM\System.sys  size: 18 bytes 

port: variable

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "(Default)"
data: C:\WINDOWS\SYSTEM\DGS.exe
 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "(Default)"
data: C:\WINDOWS\SYSTEM\DGS.exe 

tested on Windows 98
October 09, 2004

MegaSecurity