Pitfall Suprise Attack
Released 23 years, 6 months ago. May 2001
Copyright © MegaSecurity
By IntrudeR
Informations
| From | Brazil |
| Author | IntrudeR |
| Family | Pitfall |
| Category | Remote Access |
| Version | Pitfall Suprise Attack |
| Released Date | May 2001, 23 years, 6 months ago. |
Additional Information
Server:
dropped files:
c:\WINDOWS\SYSTEM\POWERPSA.EXE
size: 154.112 bytes
port: 11991 TCP
startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "LoadPowerPSA"
data: C:\WINDOWS\SYSTEM\POWERPSA.EXE
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "LoadPowerPSA"
data: C:\WINDOWS\SYSTEM\POWERPSA.EXE
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "LoadPowerPSA"
data: C:\WINDOWS\SYSTEM\POWERPSA.EXE
Server does kill some Anti-Virus Programs (AVP)
tested on Windows 98
November 08, 2004If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.