Come ToMe

Released 18 years, 8 months ago. March 2006

Copyright © MegaSecurity

By LavaBox


Come ToMe
Informations
From Germany
Author LavaBox
Family Come ToMe
Category Remote Access
Version Come ToMe
Released Date Mar 2006, 18 years, 8 months ago.
Language Visual Basic
Additional Information
Server:
dropped files:
c:\WINDOWS\dllhost.exe                                             Size: 258,048 bytes 
c:\WINDOWS\system32\taskmrg.exe                                    Size: 258,048 bytes 
c:\WINDOWS\system32\zlib.dll                                       Size: 53,248 bytes 
c:\Documents and Settings\All Users\Templates\Svchost.exe          Size: 258,048 bytes 
c:\Documents and Settings\%user%\My Documents\SystemControl.exe    Size: 258,048 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "dllhost"
data: C:\WINDOWS\system32\dllhost.exe 

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "taskmrg"
data: C:\WINDOWS\system32\taskmrg.exe 

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windll"
data: C:\Documents and Settings\Kobayashi\My Documents\SystemControl.exe 



tested on Windows XP
June 06, 2006

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.