Updated: February 13, 2007 11:42:52 AM
Type: Hack Tool
Version: 1.2
Publisher: Effe Tech
Risk Impact: High
File Names:
ApsSetup.exe
APS.exe
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
When Hacktool.AceSniffer is installed, the following actions are performed:
- Creates the following files:
- %Userprofile%\Desktop\Ace Password Sniffer.lnk
- %Userprofile%\Start Menu\Programs\Ace Password Sniffer\Ace Password Sniffer.lnk
- %Userprofile%\Start Menu\Programs\Ace Password Sniffer\UNWISE.EXE.lnk
- %ProgramFiles%\Ace Password Sniffer\APS.exe
- %ProgramFiles%\Ace Password Sniffer\eula.txt
- %ProgramFiles%\Ace Password Sniffer\INSTALL.LOG
- %ProgramFiles%\Ace Password Sniffer\readme.txt
- %ProgramFiles%\Ace Password Sniffer\UNWISE.EXE
- %ProgramFiles%\Ace Password Sniffer\WinPcap.exe
Notes:
- %ProgramFiles% is a variable that refers to the program files folder. By default, this is C:\Program Files.
- %UserProfile% is a variable that refers to the current user's profile folder. By default, this is C:\Documents and Settings\<Current User> (Windows NT/2000/XP).
- Creates the registry subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
\Uninstall\Ace Password Sniffer v1.2
HKEY_LOCAL_MACHINE\SOFTWARE\Wise Solutions\Wise Installation System
\Repair\C:/Program Files/Ace Password Sniffer
HKEY_CURRENT_USER\Software\EffeTech\Ace Password Sniffer
- Monitors network traffic and captures FTP, POP3, HTTP, SMTP, and Telnet passwords.