SpyMaster 1.0

SPyMaster 1.0
(Not detected by KAV on February 23, 2008)
(Trojan.Win32.KillAV.me for Upd.bat)

by Kaju1

Written in Delphi

Released in February 2008

Made in Brazil





Server
Dropped Files:
c:\WINDOWS\system32\Upd.bat              Size: 53,948 bytes 
c:\WINDOWS\system32\drivers\Isass.exe    Size: 555,520 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "msmsgr"
Data: C:\WINDOWS\system32\drivers\Isass.exe 




Tested on Windows XP
February 23, 2008

MegaSecurity