Servidor (a)

Copyright © MegaSecurity

By ?


Servidor (a)
Informations
Author ?
Family Servidor
Category Remote Access
Version Servidor (a)
Language Visual Basic
Additional Information
dropped files:
c:\WINNT\system\DllRun.exe (win200)
C:\WINDOWS\System\DllRun.exe (win98)

size: 176.128 bytes 

port: 1441 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinManager" 

added:
win2000:
c:\WINNT\system\DllCount.sys 
c:\WINNT\system\DllRun.exe 

win98:
c:\WINDOWS\SYSTEM\DllCount.sys 
c:\WINDOWS\SYSTEM\DllRun.exe

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.