[ v1.3.07 | 0:35 28.01.2011 ]
[!]    config.bin         ,      ,    
[+]   ntdll!NtSetInformationFile     

[ v1.3.08 | 3:57 29.01.2011 ]
[!]         IE8+
[~]    x64 , SpyEye     32-  (, , )

[ v1.3.09 | 5:40 29.01.2011 ]
[!]     GetPage() -   URL',  
[!]  ,     ,   .     .  ,    ,         Windows

[ v1.3.10 | 16:30 06.02.2011 ]
[!]  critical section     config.bin,    crc32

[ v1.3.25 | 5:26 14.03.2011 ]
[+]       , kernel32!CreateRemoteThread()   .     ntdll!NtClose().
      ,   Trusteer Rapport (Emerald Build 1006.37), ..     SDT - NtCreateThread.
      ,   , ..    NtOpenProcess    PROCESS_CREATE_THREAD
[+]     .   
[+]       (pe-loader,  replace exe')
[~]   "application/x-fcs", "application/x-compress"     ,    
[~]         (   ,    Trusteer Rapport)
[~]   nrgbot'
[~]   SpyEyeDetect' ( http://www.nordea.no/Privat/Internett+og+telefon/R%C3%A5d+om+Internett+og+telefon/Hvordan+benytte+SpyEye+Detection+verkt%C3%B8yet/1469022.html )
[!]  uninstaller
[~]    , UserAgent   ,   urlmon!ObtainUserAgentString

[ v1.3.26 | 21:38 16.03.2011 ]
[-]  FF      request- Proxy-Connection

[ v1.3.32 | 6:29 26.03.2011 ]
[!]      ( configdecoder.exe)
[+]     Opera, Chrome ( ). Also,        

[ v1.3.33 | 3:16 29.03.2011 ]
[+]   self-signed      GetPage, GetPage2.       customconnector   gate'     ssl.

[ v1.3.34 | 13:00 01.04.2011 ]
[~]  config'   CRC32   

[ v1.3.35 | 22:45 02.04.2011 ]
[!]          Opera. =/        screenshots.txt.     

[ v1.3.36  | 2:06 03.04.2011 ]
[!]       FF. (   ,            "Content-Length: 022634".   ,       ,    .    ,   FF      )
[*]     antirapport'. Spy -  Trusteer Rapport', ,   ,  Rapport (Emerald Build 1008.35)     exe',       .  ,     exe' (, ,  mutex')   .   ,   exe'        . =/ ,   ,    -    exe'       .

[ v1.3.39  | 14:19 09.04.2011 ]
[+]    DNS      customconnector'    collectors.txt.   
[!]   Rapport' (Emerald Build 1008.35),  RapportCerberus_25641.sys       . .

[ v1.3.41  | 9:01 26.04.2011 ]
[+]   jabber_notifier'
[~]  ,      ,   collectors.txt,    dns.txt
[!]   Rapport' (Emerald Build 1008.35),  RapportCerberus_26169.sys        . .
 ,      Zeus',   SpyEye',  Rapport'    -  ,       ,    .
         .

[ v1.3.45  | 1:20 07.06.2011 ]
[+]  SDK -  API    DLL  ,      SpyEye  .      ,      .   -  .
[+] ,  Rapport        (config.bin).   ,         ,              .    ,   ,     (     ,        exe).
 ,   ,         (Emerald Build 1008.42).

[ v1.3.48  | 4:57 01.10.2011 ]
[!]   FF7, FF8