SWU32 1.03
Released 20 years, 11 months ago. October 2003
Copyright © MegaSecurity
By System33r
Informations
| Author | System33r |
| Family | SWU32 |
| Category | Remote Access |
| Version | SWU32 1.03 |
| Released Date | Oct 2003, 20 years, 11 months ago. |
| Language | Visual Basic |
Additional Information
Server:
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Microsoft Wininit (winlogon32)"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Script Host"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices "Microsoft Wininit (winlogon32)"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices "Windows Script Host"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
added:
c:\WINNT\system32\system33r.dll
size: 12.288 bytes
c:\WINNT\system32\winhost32.exe
size: 8.064 bytes
c:\WINNT\system32\winlogon32.exe
size: 21.536 bytes
tested on win2000If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.