Scene Archive Smart-PS 1.3

.: Smart-PS 1.3 :.

Released 16 years, 9 months ago. Oct 2004

By SMA Soft

::actions

I feel lucky I feel lucky (with image)

Additional Details

From: Iran
Coded by: SMA Soft
Version: Smart-PS 1.3
Released date: Oct 2004, 16 years, 9 months ago.
Coded in: Delphi & Visual Basic, compressed with PECompact
Family: Smart-PS 1.3
Category: Information Stealer

MegaSecurity Notes

Server:
dropped files:
c:\WINDOWS\regsvc.exe              size: 22,937 bytes 
c:\WINDOWS\Stub32770.exe           size: 22,937 bytes 
c:\WINDOWS\system32\Agentsvr32.exe size: 22,937 bytes 
c:\WINDOWS\system32\hInstance.dll  size: 0 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8C15971b-RKTP-4c82-8c07-7e181ea07608} "StubPath"
data: C:\WINDOWS\System32\Agentsvr32.exe /hide 


tested on Windows XP
January 04, 2005

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.