Signature Detail

SPYWARE: Poison Ivy 2.1.2

This signature detects the runtime behavior of the spyware Poison Ivy 2.1.2. Poison Ivy 2.1.2 is a Trojan application. It can allow a remote attacker to take full control of a victim's machine. The main functions include full-featured file/registry/services/process manager, screen capture, keylogger, traffic sniffer, and password manager.

References

• URL: http://www.megasecurity.org/trojans/p/poisonivy/Poisonivy_all.html
• URL: http://www.megasecurity.org/trojans/p/poisonivy/Poisonivy2.1.2.html
• URL: http://research.sunbelt-software.com/threatdisplay.aspx?name=PoisonIvy&threatid=43179