Phoenix II 1.72
Released 23 years, 4 months ago. October 2001
Copyright © MegaSecurity
By C)DMP & Kaos³
Informations
| From | Italy |
| Author | C)DMP & Kaos³ |
| Family | Phoenix II |
| Category | Remote Access |
| Version | Phoenix II 1.72 |
| Released Date | Oct 2001, 23 years, 4 months ago. |
| Language | Microsoft Visual C++ |
Author Information / Description
Server:
dropped files:
c:\WINDOWS\Msatrib.EXE size: 217.088 bytes
c:\WINDOWS\TEMP\~P2.EXE size: 217.088 bytes
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Msatrib"
data: C:\WINDOWS\Msatrib.EXE
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce "C:\WINDOWS\TEMP\~P2.EXE"
data: C:\WINDOWS\Msatrib.exe /del C:\WINDOWS\TEMP\~P2.EXE
tested on Windows 98
November 18, 2004If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.