Stealth Eye 1.2
(Backdoor.Win32.StealthEye.10.b)
(Trojan-Downloader.Win32.SMW.e for Stub.txt)

by FeNnA

Written in Visual Basic

Released in October 2004

more versions




Server:
dropped file:
c:\WINNT\camdrv.exe
size: 40.960 bytes
 
port: 9777, 9778 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "cam"
data: C:\WINDOWS\camdrv.exe
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "camdrvs"
data: C:\Winnt\camdrv.exe 

Readme.txt does activate webdownloader

tested on Windows 2000

MegaSecurity