Home Malware Programs Remote Administration Tools B-S Spy

B-S Spy

Posted: March 28, 2006

Several versions of this RAT can be found in the internet. But the main principle and goal of all B-Spy versions is the same. It is an easy to use hacker tool, which provides the intruder with the ability to control the victim's PC remotely. A "server" application is being secretly placed in victim's computer and the hacker can connect via a client on his machine. The infection peaked in the United States, although you shouldn't relax if you live in another country. It was written in Visual Basic. The author is Hackboys.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 -ssys.reg
    2 [system
    3 b-s editserver.exe
    4 hackboys
    5 msmsngs.exe
    6 msn-server.exe
    7 net-server.exe
    8 readme.txt
    9 regedit
    10 ya-server.exe
    11 ypager.exe
    12 yupdater.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionunsysHKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionunsysHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionunsysmsnunsystemHKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversion
Loading...