I Feel Lucky I Feel Very Lucky

AntiLamer Backdoor 2.0 (a &b)

Copyright © MegaSecurity

By OverG

Informations
From Russia
Author OverG
Family AntiLamer Backdoor
Category Remote Access
Version AntiLamer Backdoor 2.0 (a &b)
Language Delphi
Additional Information 
Server:
C:\WINDOWS\Scandisk.exe 

size: 182.998 bytes

port: 29999, 47891 TCP

startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "MS Scandisk" 
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "MS Scandisk" 

Added:
c:\WINDOWS\SCAN.DLL

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.