Shut-it
Released 22 years, 5 months ago. June 2002
Copyright © MegaSecurity
By illwill
Informations
| Author | illwill |
| Family | Shut-it |
| Category | Webdownloader |
| Version | Shut-it |
| Released Date | Jun 2002, 22 years, 5 months ago. |
| Language | Assembler |
Additional Information
Server:
dropped file:
c:\WINDOWS\VPROT32.exe
size: 7,168 bytes
added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "VirusProt32"
tested on Windows XP
February 05, 2007
Author Information / Description
===========================================================
a 3.5kb webdownloader that will download any file from a
website and execute it.also kills any AV's and firewalls running
works on win9x/me/nt/2k/xp
;===========================================================
features:
*only 3.5kb packed
*downloads a larger trojan from any web url
*stays resident on the computer killing over 280 av's and firewalls
*restarts with the computer
*if downloaded trojan ever gets deleted it will redownload it again
Instructions
1. extract all files from zip to a folder
2. open up editor.exe **DO NOT CLICK SERVER.EXE!!!!****
3. select the [...] to browse for server.exe
4. once server is selected press read
5. change the settings to your liking
a. URL: is the site where your larger trojan is downloaded from
b. exe: is the name of the file is called after downloading
c. AVKILL: is the name this file will be called when copied to windir
d. RegKey: is the startup registry keynameIf you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.