PCO CTRL
Released 19 years ago. November 2005
Copyright © MegaSecurity
By Pedram M
Informations
From | The Middle East |
Author | Pedram M |
Family | PCO CTRL |
Category | Remote Access |
Version | PCO CTRL |
Released Date | Nov 2005, 19 years ago. |
Language | Visual Basic |
Additional Information
Server:
dropped file:
c:\WINDOWS\system32\WinAssic.exe
size: 60,716 bytes
port: 6511 TCP
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
old data: Explorer.exe
new data: Explorer.exe C:\WINDOWS\System32\WinAssic.Exe
tested on Windows XP
August 12, 2006
If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.