I Feel Lucky I Feel Very Lucky

Beast 1.92 (a) (February 22, 2003)

Copyright © MegaSecurity

By Tataye

Beast 1.92 (a) (February 22, 2003)
Informations
From Rumania
Author Tataye
Family Beast
Category Remote Access
Version Beast 1.92 (a) (February 22, 2003)
Language Delphi
Additional Information 
Server:
dropped files:
c:\WINDOWS\msagent\msag.com 
c:\WINDOWS\SYSTEM\COM\mscom32.com 

size: 52.224 bytes (compressed)

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{54AD0222-BB51-31EF-BBFA-06AA12E6115C} "StubPath" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run "COM Service" 

added:
c:\WINDOWS\SVCHOST.EXE 
c:\WINDOWS\SYSTEM\kl.dli

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.