| Name: | CyberSpy |
| Aliases: | CS, Backdoor.CyberSpy, |
| Ports: | 200, 14194, 38741, 38742 (ports can be changed) |
| Files: | Cs1.3.zip - Cyberspy1.3.zip - 170,300 bytes Cyberspy8.0.zip - Cyberspy8.2.zip - Client.exe - 111,617 bytes Install.exe - 47,824 bytes Setup.exe - Cseditor.exe - ~install.exe - 49,360 bytes ~cab001.exe - Msgsvr16.exe - Msgsvr16.exe.exe - Mswincfg32.exe - |
| Created: | Mar 2001 |
| Requires: | Mswinsck.ocx and VB5 or VB6 runtime files - are required to run the trojan. |
| Actions: | Anti-protection trojan / Remote Access / Keylogger / Steals passwords |
| Registers: | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\ | |
| HKEY_USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run\ | |
| HKEY_CURRENT_USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run\ | |
| Notes: | Works on Windows. Telnet and poTTY can be used as client. |
| Country: | written in Romania |
| Program: | Written in Visual Basic 5.0 and 6.0. |