.: Tibia Stealer 0.2 :.

Additional Details

• From: Poland
• Coded by: Amper
• Version: Tibia Stealer 0.2
• Released date: May 2007, 15 years, 6 months ago.
• Coded in: Delphi
• Family: Tibia Stealer 0.2
• Category: Information Stealer

MegaSecurity Notes

dropped file:
c:\WINDOWS\system\system.exe
size: 200,196 bytes 

added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "system"
data: c:\windows\system\system.exe 

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile "EnableFirewall"
data: 00, 00, 00, 00 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile "EnableFirewall"
data: 00, 00, 00, 00 




tested on Windows XP
May 14, 2007