Stealth Eye 1.0 Server (d)

Stealth Eye 1.0 Server (d)
(Backdoor.Win32.StealthEye.10.d)

by FeNnA

Written in Visual Basic

Released in November 2002




Server:
dropped file:
c:\WINDOWS\system32\camdrvz.exe
size: 102,400 bytes 

port: 9000, 9005 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Camdriver"
data: C:\WINDOWS\system32\camdrvz.exe 



tested on Windows XP
June 10, 2005

MegaSecurity