Try2Sniff
(Trojan-Spy.Win32.Delf.it)
(Sniffer.Win32.Ngsniff.12)
(not-a-virus:Tool.Win32.HideRun)

by ?

Written in Delphi

Released in July 2005




dropped files:
%local dir%\HideRun.exe    Size: 8,192 bytes 
%local dir%\ngSniff.exe    Size: 40,960 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Try2Sniff"
Data: %local dir%\Try2Sniff.exe 



tested on Windows XP'July 05, 2005

MegaSecurity