.: IE PS 1.5.8 :.

Additional Details

• From: The Middle East
• Coded by: pswin.pooya
• Version: IE PS 1.5.8
• Released date: Apr 2006, 15 years, 6 months ago.
• Coded in: Visual Basic
• Family: IE PS
• Category: Information Stealer

MegaSecurity Notes

Server:
dropped files:
c:\WINDOWS\system32\regm.dat      Size: 0 bytes 
c:\WINDOWS\system32\regsvr.exe    Size: 33,792 bytes 


HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "regsvr.exe"
data: C:\WINDOWS\System32\regsvr.exe sysdir 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "regsvr.exe"
data: C:\WINDOWS\System32\regsvr.exe sysdir 	

	

tested on Windows XP
April 28, 2006