|
TrojanSpy.Win32.GreenScreen.09 Viruses Information
| Name: |
TrojanSpy.Win32.GreenScreen.09 |
| Category: |
Viruses |
| Description:
|
Details
TrojanSpy.Win32.GreenScreen.099
This is spy trojan that installs itself to the system, hides itself and then captures screen images and saves them to disk files in encrypted form. Thus it allows to a hacker to watch screen images.
The trojan itself is Windows PE EXE file, compressed by AsPack, written in Delphi. The trojan size is different and depends on trojan version.
While installing the trojans copies itself to Windows system directory with the SERVICES.EXE name and registers that file in system registry auto-run key:
HKLMSoftwareMicrosoftWindowsCurrentVersionRun Services
It also writes "auto-run" command to SYSTEM.INI file to "shell=" instruction.
The captured screens are stored to SPCSPC*.* files in Windows system direcotry.
The trojan is written in China and has text strings in Chinese. |
Top Viruses Visited Pages:
Invader. - 239 visits
not-a-virus:RiskWare.Tool.RegPatch. - 73 visits
Worm.P2P.Harex. - 66 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 60 visits
Small.58. - 56 visits
Coito.64 - 54 visits
I-Worm.Mapson. - 48 visits
Win32.Hidra - 43 visits
Win16.Klon.1177 - 42 visits
Marine.500 - 35 visits
Random Viruses Pages:
HLLP.Iro
Macro.Word.Caffein
Nostardamus.3072.
Cybercide Famil
HLLP.Deftones.857
SomeKit.AOS.84
Vis Famil
Win32.Nox.229
PC_Ogre.38
Yusong.147
|
