Fear server

Released 20 years, 3 months ago. August 2004

Copyright © MegaSecurity

By SNiPER


Fear server
Informations
From Germany
Author SNiPER
Family Fear
Category Remote Access
Version Fear server
Released Date Aug 2004, 20 years, 3 months ago.
Language Visual Basic, compressed with UPX
Additional Information
Server:
dropped files:
c:\WINDOWS\ijl10.dll           size: 52.224 bytes 
c:\WINDOWS\wintmp32.tmp.exe    size: 143.359 bytes 
c:\WINDOWS\XSBind.exe          size: 0 bytes 

port: 5231, 5232, 5233, 5234 TCP

added to registry:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr"
data: 1 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "WinLogonApplication32"
data: C:\WINDOWS\WINTMP32.TMP.exe 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "WinLogonApplication32"
data: C:\WINDOWS\WINTMP32.TMP.exe

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.