MP Bus

Released 24 years, 4 months ago. June 2000

Copyright © MegaSecurity

By Carl-Fredrik Neikter


MP Bus
Informations
Author Carl-Fredrik Neikter
Family NetBus
Category Remote Acces
Version MP Bus
Released Date Jun 2000, 24 years, 4 months ago.
Language Delphi
Additional Information
Server:
dropped file:
c:\WINDOWS\MPOWER.EXE 

size: 494.592 bytes 

port: 650, 651 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "MPOWER" 

added:
c:\WINDOWS\mpowerk.dll

Author Information / Description
Modified Netbus with ports 650 and 651 (instead of 12345 and 123456)
and different named keylogger.

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.