Pitfall Suprise Attack

Released 23 years, 4 months ago. May 2001

Copyright © MegaSecurity

By IntrudeR


Pitfall Suprise Attack
Informations
From Brazil
Author IntrudeR
Family Pitfall
Category Remote Access
Version Pitfall Suprise Attack
Released Date May 2001, 23 years, 4 months ago.
Additional Information
Server:
dropped files:
c:\WINDOWS\SYSTEM\POWERPSA.EXE
size: 154.112 bytes 

port: 11991 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "LoadPowerPSA"
data: C:\WINDOWS\SYSTEM\POWERPSA.EXE 

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "LoadPowerPSA"
data: C:\WINDOWS\SYSTEM\POWERPSA.EXE 

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "LoadPowerPSA"
data: C:\WINDOWS\SYSTEM\POWERPSA.EXE 

Server does kill some Anti-Virus Programs (AVP)

tested on Windows 98
November 08, 2004

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.