GhostBot 0.55
Copyright © MegaSecurity
By Positron
Informations
| Author | Positron |
| Family | GhostBot |
| Category | Remote Access |
| Version | GhostBot 0.55 |
Additional Information
GhostBot:
dropped file:
c:\WINDOWS\wLVH4Q.exe
size: 34.515 bytes
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SWNETSUP"
data: C:\WINDOWS\wLVH4Q.exe
does (try to) connect to an IRC server
tested on Windows XP
09 November 2004
Author Information / Description
v0.55
-!mirccmd added,
-bug fixed in "commandprefix",
PositronIf you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.