Signature Detail

SPYWARE: Crossbow

This signature detects the runtime behavior of the spyware Crossbow 1.12 Crossbow 1.12 is a Trojan application. It can allow a remote attacker to take full control of victim's computer. The functions include: get server information, administrator (get/set clipboard, commands for fun, process killer, system information, system logoff/restart/shutdown), chat, downloader, Internet surfing, keylogger, remote shell, send message, and server manager.

References

• URL: http://research.sunbelt-software.com/threatdisplay.aspx?name=Trojan.Crossbow&threatid=48646
• URL: http://www.securitylab.ru/virus/271289.php
• URL: http://www.megasecurity.org/trojans/c/crossbow/Crossbow1.12.html