Nini 1.01

Released 19 years, 5 months ago. June 2005

By Red Move

Informations

Author	Red Move
Family	Nini
Category	Information Stealer
Version	Nini 1.01
Released Date	Jun 2005, 19 years, 5 months ago.
Language	Visual Basic, compressed with UPX

Additional Information

Server:
dropped file:
c:\WINDOWS\system32\Mscng.exe
size: 15,410 bytes 

startup:
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)"
old data: "%1" %* 
new data: Mscng.exe opext "%1" %* 


	
tested on Windows XP
June 06, 2005

Author Information / Description

Nini is a pass sender that can send Yahoo Messenger password to you.

--------
Features
--------
+ Both email and cgi logger notification.
+ Fake message at double click on server.
+ Run file at double click on server.
+ Able to change icon.
+ Binder.
+ Firewall bypassing.
+ Undetectable by anti viruses.
+ Not shown in msconfig.
+ Diabolic startup
+ Server size is about 15.0 KB

Red Move