TurkSpy 1.0 Fix 1
(HackTool.Win32.VB.oc for Client)
(Trojan-Proxy.Win32.Agent.to for Server)

by r@nger

Released in November 2007

Made in Turkey

more versions





Server
Dropped Files:
c:\WINDOWS\system32\OSSMTP.dll              Size: 196,608 bytes 
c:\WINDOWS\system32\drivers\userinf.exe     Size: 58,368 bytes 
c:\WINDOWS\system32\drivers\userinf.txt
c:\WINDOWS\system32\drivers\userinfo.EXE    Size: 323,955 bytes 

Startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "msmsgs"
Data: C:\WINDOWS\system32\drivers\userinfo.EXE 




Tested on Windows XP
November 21, 2007

MegaSecurity