I Feel Lucky I Feel Very Lucky

Glacier XX [JzNKooO]

Released 22 years, 9 months ago. February 2002

Copyright © MegaSecurity

By Y2KZERO

Glacier XX [JzNKooO]
Informations
From China
Author Y2KZERO
Family Glacier
Category Remote Access
Version Glacier XX [JzNKooO]
Released Date Feb 2002, 22 years, 9 months ago.
Language Borland C++, compressed with ASPack
Additional Information 
Client:
port: 7718 TCP



Server:
port: 7626 TCP

dropped files:
c:\WINNT\system32\Kernel32.exe  size: 266,752 bytes 
c:\WINNT\system32\Sysexplr.exe  size: 266,752 bytes

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "(Default)" 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices "(Default)" 
HKEY_CLASSES_ROOT\txtfile\shell\open\command "(Default)"

registry added:
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings "EnableAutodial" 
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings "EnableAutodisconnect" 
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "EnableAutodisconnect" 
HKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings "EnableAutodisconnect" 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings "EnableAutodial" 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings "EnableAutodisconnect"

tested on win2000

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.