Ders (c)
Copyright © MegaSecurity
By ?
Informations
| Author | ? |
| Family | Ders |
| Category | Remote Access |
| Version | Ders (c) |
| Language | Borland C++, compressed with UPX |
Additional Information
dropped file:
c:\WINDOWS\SCANREGW.EXE
size: 222,209 bytes
port: 113 TCP
added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ScanRegistry"
data: C:\WINDOWS\scanregw.exe /autorun
The text string "War Gibbon v0.60C [DeRS Edition]" can be found in the executable.
tested on Windows XP
March 16, 2005If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.