AutoSpY


Name: AutoSpY
Aliases: AntiSpy, Backdoor.AntiSpy, Backdoor.AutoSpy,
Ports: 23, 1008, 3505, 6556, 7274, 8734
Files: Autospy10.zip - 90,543 bytes Autospy11.zip - 49,695 bytes Autospy12.zip - Autospy13.zip - 310,556 bytes Autospy14.zip -Autpspyan.zip - 325,196 bytes Autpspyan122.zip - Autospy.exe - 196,608 bytes Autospy.exe - 290,816 bytes Autospy13.exe - 393,216 bytes Asapocalipsenow.exe - 434,176 bytes Server.exe - 61,440 bytes Server.exe - 73,728 bytes Server.exe - 950,272 bytes Server.exe - 970,752 bytes Cleanit.exe - 20,480 bytes Tapi32.exe - Mskernel32.exe - Sysroot.exe - R2d2.exe - 45,056 bytes Mswinsck.ocx - 108,336 bytes Msupdate.exe - Sysroot.exe -
Created: Apr 2002
Requires: Mswinsck.ocx - is required to run the trojan.
Actions: Anti-protection trojan / Remote Access / Worm / Network trojan / DoS tool / Telnet server / Virus dropper / Prank trojan
Registers: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\
Notes: Works on Windows 95 and 98, together with MS Outlook. At least on version 1.2 Apocalipse, Telnet can be used as client.
Country:
Program: Written in Visual Basic.

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>