Spy Agent 1.2

Released 17 years, 11 months ago. July 2007

By AliCaNelKa

Informations

From	Turkey
Author	AliCaNelKa
Family	Spy Agent
Category	Information Stealer
Version	Spy Agent 1.2
Released Date	Jul 2007, 17 years, 11 months ago.
Language	Delphi

Additional Information

Server
Dropped Files:
c:\WINDOWS\Amcam13.ini     Size: 14 bytes 
c:\WINDOWS\ayar.ini        Size: 105 bytes 
c:\WINDOWS\openssl.cnf     Size: 9,374 bytes 
c:\WINDOWS\services.ini    Size: 99 bytes 
c:\WINDOWS\winlogon.exe    Size: 426,102 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "System"
Data: \windows\winlogon.exe 




Tested on Windows XP
September 25, 2007

Author Information / Description

Password Stealer for
  
    * MSN Messenger
    * Windows Messenger (In Windows XP)
    * Windows Live Messenger (In Windows XP And Vista)
    * Yahoo Messenger (Versions 5.x and 6.x)
    * Google Talk
    * ICQ Lite 4.x/5.x/2003
    * AOL Instant Messenger (only older versions, the password in newer versions of AIM cannot be recovered)
    * AOL Instant Messenger/Netscape 7
    * Trillian
    * Miranda
    * GAIM