TsuRat 0.3
(Trojan.Win32.Agent.bspy)
(Trojan.Win32.Agent.bwzq)

by Tsunami

Written in Delphi

Released in February 2009

more versions

 





Server
Dropprd File:
c:\WINDOWS\winlogon.exe 
Size: 352,256 bytes 

Added to Registry:
HKEY_CURRENT_USER\Software\lolzz "lol" 
Data: C:\WINDOWS\winlogon.exe 

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Winlogon" 
Data: C:\WINDOWS\winlogon.exe..



Tested on Windows XP
March 08, 2009

MegaSecurity