Spirit 4.2
(Constructor.Win32.Iciko.b)
(Backdoor.Win32.Agent.aov for msx.dll)
(Backdoor.Win32.Small.md for Server)

by iciko

Written in Delphi

Released in December 2007

more versions 


Introduction

Spirit Uploader 4 is a reverse-connection remote administration tool compiled with NASM and designed for small size and low memory usage. It allows the user to remotely manage a computer on which the server file has been executed.
Features

Size

    * ~1400 bytes (Varies with settings)


Base

    * ActiveX startup
    * Install into system directory
    * Injection into explorer.exe process
    * Invisible in the task manager
    * Runs on Windows 98/2000/Me/NT/XP/Vista/Longhorn


Plugin

    * Computer information
    * File manager
    * Process manager
    * Windows manager
    * Service manager
    * Registry manager
    * Screen capture (requires GDIPlus.dll)
    * Camera capture (requires GDIPlus.dll)
    * LZO data compression






Tested on Windows XP
February 05, 2008
MegaSecurity