SWU32 1.03
Released 21 years, 4 months ago. October 2003
Copyright © MegaSecurity
By System33r

Informations
Author | System33r |
Family | SWU32 |
Category | Remote Access |
Version | SWU32 1.03 |
Released Date | Oct 2003, 21 years, 4 months ago. |
Language | Visual Basic |
Additional Information
Server:
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Microsoft Wininit (winlogon32)"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Script Host"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices "Microsoft Wininit (winlogon32)"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices "Windows Script Host"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
added:
c:\WINNT\system32\system33r.dll
size: 12.288 bytes
c:\WINNT\system32\winhost32.exe
size: 8.064 bytes
c:\WINNT\system32\winlogon32.exe
size: 21.536 bytes
tested on win2000
If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.