| Notes: | When run, the Trojan Spymaster.A creats a file called SYSCONT.EXE. The process used by this file is named "Win servico". However, the process does not show up that way in the Task Manager; it shows up as MSN Messenger. The Trojan also creates a text file called SYSLOGY.CC which stores much data about how a user uses the computer. If allowed, this file will be sent via FTP to be used against the computer's user. |
