Netbot Attacker 2007

Released 17 years ago. November 2007

Copyright © MegaSecurity

By Warning Security Team


Netbot Attacker 2007
Informations
From China
Author Warning Security Team
Family Netbot Attacker
Category Remote Access
Version Netbot Attacker 2007
Released Date Nov 2007, 17 years ago.
Additional Information
Server
Dropped File:
c:\WINDOWS\system32\drivers\svchost.exe
Size: 10,641 bytes 

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wuauserv "ImagePath"
Old data: %systemroot%\system32\svchost.exe -k netsvcs 
New data: %SystemRoot%\system32\drivers\svchost.exe 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv "ImagePath"
Old data: %systemroot%\system32\svchost.exe -k netsvcs 
New data: %SystemRoot%\system32\drivers\svchost.exe 



Tested on Windows XP
February 21, 2008

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.