| Port No | 23777 |
| Service Name | InetSpy |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | InetSpy beta 1 is a Russian trojan. Because it is in Russian, we can not determine most of the features. |
| Reference Link | InetSpy Trojan |
| Attack | It autoloads the Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Key: Win32ins It does the following : Get cached passwords Get RAS information Send to URL Removal : 1.Remove the Win32ins key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Which can be done with regedit or any other registry editing program. 2. Reboot the computer or close Insbt.exe. 3. Delete the trojan file Insbt.exe in the windows system directory. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.