.: VicSpy KeyLogger 2008 :.

Additional Details

• Coded by: VicSpy Soft
• Version: VicSpy KeyLogger 2008
• Released date: Feb 2008, 14 years, 9 months ago.
• Family: VicSpy
• Category: Information Stealer

MegaSecurity Notes

Server
Dropped Files:
c:\WINDOWS\system32\ftdutil.exe     Size: 65,536 bytes 
c:\WINDOWS\system32\ntvxdc.exe      Size: 65,536 bytes 
c:\WINDOWS\system32\wcsydrv.exe     Size: 65,536 bytes 
c:\WINDOWS\system32\wintgtsv.exe    Size: 65,536 bytes 	

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce "Virtual Java"
Data: wintgtsv.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Sys Startup"
Data: wintgtsv.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Windows start"
Data: explorer.exe wintgtsv.exe 	
	
	
	
Tested on Windows XP
February 09, 2008