.: IMP-PS 1.0 :.
Released 16 years, 4 months ago. Jul 2006By Mahdi Hezavehi
- Coded by: Mahdi Hezavehi
- Version: IMP-PS 1.0
- Released date: Jul 2006, 16 years, 4 months ago.
- Coded in: Delphi
- Family: IMP-PS 1.0
- Category: Information Stealer
Server: dropped files: c:\WINDOWS\smlogitech.vbs size: 179 bytes deleted file: c:\WINDOWS\system32\Restore\MachineGuid.txt added to registry: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Explorer32" data: C:\WINDOWS\xplorer.exe HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_DLLCACH\0000\Control HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DllCach HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\C HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DLLCACH\0000\Control HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DllCach tested on Windows XP July 04, 2006
URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at firstname.lastname@example.org, thank you in advance.