Psw Yahoo
Released 17 years, 4 months ago. July 2007
Copyright © MegaSecurity
By E.M.I.N.E.M
Informations
| From | Romania |
| Author | E.M.I.N.E.M |
| Family | Psw Yahoo |
| Category | Remote Access |
| Version | Psw Yahoo |
| Released Date | Jul 2007, 17 years, 4 months ago. |
| Language | Visual Basic |
Additional Information
Server:
dropped file:
c:\WINDOWS\system32\svchost32.exe
size: 118,784 bytes
port: 8888 TCP
added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr"
data: 01, 00, 00, 00
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "server"
tested on Windows XP
July 19, 2007If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.