NetMonitor 3.0 (e)

Released 23 years, 10 months ago. March 2001

Copyright © MegaSecurity

By Tiger Liu


NetMonitor 3.0 (e)
Informations
From China
Author Tiger Liu
Family NetMonitor
Category Remote Access
Version NetMonitor 3.0 (e)
Released Date Mar 2001, 23 years, 10 months ago.
Language Microsoft Visual C++
Additional Information
Server:
dropped files:
c:\WINDOWS\system32\netspy.exe     size: 282.624 bytes 
c:\WINDOWS\system32\NETSPYHKS.DLL  size: 45.056 bytes 

added to registry:
HKEY_USERS\.DEFAULT\Software\ORL\VNCHooks\Application_Prefs\netspy.exe
HKEY_USERS\S-1-5-18\Software\ORL\VNCHooks\Application_Prefs\netspy.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NETSPY_SERVICE\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NETSPY_SERVICE\Enum
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NETSPY_SERVICE\Security
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETSPY_SERVICE\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NETSPY_SERVICE\Enum
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NETSPY_SERVICE\Security


tested on Windows XP
December 19, 2004
port: 7306, 7389 TCP

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.