TakFanar KeyLogger 4.0
(Trojan.Win32.VB.icm)
(Backdoor.Win32.Bifrose.ahld)

by Tak Fanar

Written in Visual Basic

Released in July 2008





Server
Dropprd Files:
c:\WINDOWS\batshell.bat    Size: 22,977 bytes 
c:\WINDOWS\del.bat         Size: 101 bytes 
c:\WINDOWS\svhost.exe      Size: 32,367 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "wiinntt"
Data: C:\WINDOWS\svhost.exe 



Tested on Windows XP
August 29, 2008

MegaSecurity