Netsys 5.8
Released 19 years, 9 months ago. February 2005
Copyright © MegaSecurity
By Zhou Jian
Informations
| From | China |
| Author | Zhou Jian |
| Family | Netsys |
| Category | Remote Access |
| Version | Netsys 5.8 |
| Released Date | Feb 2005, 19 years, 9 months ago. |
| Language | Delphi |
Additional Information
Client:
port: 6678, 4777 TCP
Server:
dropped file:
c:\Program Files\Remote\Rundlll.exe
size: 612,917 bytes
port: 4778 TCP
added to registry:
HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie
HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rundlll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\msvideo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\freerwx
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\freerwx\Security
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources\msvideo
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\freerwx
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\freerwx\Security
tested on win2000
March 06, 2005If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.