from the doc: Espionage is a trojan http server. it was created on an xp box with visual basic. (it will run on all versions of windows) trojan runs on port81 and is controlled through browser. To access the server after infection simply bring up http://server's ip:81 in your browser.what is so different about espionage? Espionage has the ability to close antivirus's on windows 95/98/NT/2k/XP, including mcaffee and norton. also, on NT/2k/XP, the system task manager is disabled. Registry editor and msconfig are also disabled along with many other anti virus and firewall applications.What else can espionage besides serve files via browser/http? Espionage has the ability to view screen, view pc camera, view pc info, erebus
Backdoor.Espion.10Backdoor.Espion.11
Windowssystemcap.exe
HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionunwin svc host