Search found 2 matches

by vCatcher
Fri Sep 10, 2010 11:12 am
Forum: Malware
Topic: Trojan SpyEye (alias Pincav)
Replies: 418
Views: 399629

Re: Trojan SpyEye (alias Pincav)

Packer(or Crypter or Whatever) is changed? After passing the UPX layer , we endup in some piece of code , which is obviously not output of any normal compiler. That binary has additional protection layer we can only assume if generated by builder but most likelly its just crypted with some crypter....
by vCatcher
Fri Apr 02, 2010 3:05 pm
Forum: Malware
Topic: Trojan SpyEye (alias Pincav)
Replies: 418
Views: 399629

Re: Trojan SpyEye (alias Pincav)

Hello Here is very simple cleaner i wrote.I have tested it with samples posted in this thread. Im not sure which version of trojan it is,but cleaner should work on all versions. I would be thankfull for samples when Trojan changes its file-paths or add self-protection so i could update cleaner. outp...