NetSpy 2000

Released 24 years, 10 months ago. April 2000

Copyright © MegaSecurity

By NetSpy


Informations
From Brazil
Author NetSpy
Family NetSpy
Category Remote Access
Version NetSpy 2000
Released Date Apr 2000, 24 years, 10 months ago.
Language Visual Basic
Additional Information
Server:
dropped file:
c:\WINNT\system32\SHADOW.EXE
size: 211.456 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Ast"
data: C:\WINNT\SYSTEM32\SHADOW.EXE
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices "Frsforwe"
data: C:\WINNT\SYSTEM32\SHADOW.EXE

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run "Bcav"
data: C:\WINNT\SYSTEM32\SHADOW.EXE

HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\Fklfvswv "Path"
data: C:\WINNT\SYSTEM32\SHADOW.EXE 
  
tested on Windows 2000

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.