Netbot Attacker 1.6

Released 16 years, 10 months ago. November 2007

Copyright © MegaSecurity

By Warning Security Team


Netbot Attacker 1.6
Informations
From China
Author Warning Security Team
Family Netbot Attacker
Category Remote Access
Version Netbot Attacker 1.6
Released Date Nov 2007, 16 years, 10 months ago.
Additional Information
Server
Dropped File:
c:\WINDOWS\system32\drivers\svchost.exe
Size: 10,641 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wuauserv "ImagePath"
Old data: %systemroot%\system32\svchost.exe -k netsvcs 
New data: %SystemRoot%\system32\drivers\svchost.exe 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv "ImagePath"
Old data: %systemroot%\system32\svchost.exe -k netsvcs 
New data: %SystemRoot%\system32\drivers\svchost.exe 



Tested on Windows XP
December 27, 2007

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.