Nini 1.01

Released 19 years, 10 months ago. June 2005

By Red Move

Informations

Author	Red Move
Family	Nini
Category	Information Stealer
Version	Nini 1.01
Released Date	Jun 2005, 19 years, 10 months ago.
Language	Visual Basic, compressed with UPX

Additional Information

Server:
dropped file:
c:\WINDOWS\system32\Mscng.exe
size: 15,410 bytes 

startup:
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)"
old data: "%1" %* 
new data: Mscng.exe opext "%1" %* 


	
tested on Windows XP
June 06, 2005

Author Information / Description

Nini is a pass sender that can send Yahoo Messenger password to you.

--------
Features
--------
+ Both email and cgi logger notification.
+ Fake message at double click on server.
+ Run file at double click on server.
+ Able to change icon.
+ Binder.
+ Firewall bypassing.
+ Undetectable by anti viruses.
+ Not shown in msconfig.
+ Diabolic startup
+ Server size is about 15.0 KB

Red Move