Russian Trojans : Test Spy

Test Spy

Name: Test Spy
Version: -
Author: IntelCom
Language: Visual C++
Packed: not packed

Server
Icon
Name Test.exe
(1) Size 47104/16896
(1) KAV detected Trojan.PSW.TestSpy.a
(2) Size 47616/17408 (27.08.1999)
(2) KAV detected Trojan.PSW.TestSpy.b
(3) Size 47616/17928
(3) KAV detected Trojan.PSW.TestSpy.c
(4) Size 53266/28672 (08.04.2000)
(4) KAV detected Trojan.PSW.TestSpy.d
(5) Size 43027/15872 (10.08.2001)
(6) KAV detected not-a-virus:Tool.TestSpy

	Server
Icon
Name	Test.exe
(1) Size	47104/16896
(1) KAV detected	Trojan.PSW.TestSpy.a
(2) Size	47616/17408 (27.08.1999)
(2) KAV detected	Trojan.PSW.TestSpy.b
(3) Size	47616/17928
(3) KAV detected	Trojan.PSW.TestSpy.c
(4) Size	53266/28672 (08.04.2000)
(4) KAV detected	Trojan.PSW.TestSpy.d
(5) Size	43027/15872 (10.08.2001)
(6) KAV detected	not-a-virus:Tool.TestSpy

Warning:
Basic file (Test.exe) contain MS Compress archive with executable file. This file display window with license and disclamer, drop new executable file (main trojan) and execute them. Size of dropped file present after "/".