.: BackSpy Professional :.

Additional Details

• From: Turkey
• Coded by: ErCaN & Prens-Simar
• Version: BackSpy Professional
• Released date: Mar 2006, 16 years, 6 months ago.
• Family: BackSpy Professional
• Category: Information Stealer

MegaSecurity Notes

Server:
dropped files:
c:\WINDOWS\system32\Crss.exe        Size: 208,386 bytes 
c:\WINDOWS\system32\lusrmgrs.bat    Size: 140 bytes 
c:\WINDOWS\system32\lusrmgrs.exe    Size: 43,008 bytes 
c:\WINDOWS\system32\sregedit.bat    Size: 141 bytes 
c:\WINDOWS\system32\sregedit.exe    Size: 31,744 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "Crss"
data: C:\WINDOWS\System32\Crss.exe 



tested on Windows XP
March 12, 2006