Thing 1.6

Copyright © MegaSecurity

By Blade


Informations
From Romania
Author Blade
Family Thing
Category Remote Access
Version Thing 1.6
Additional Information
dropped file:
c:\WINDOWS\Cmmnds32.exe
size: 4.616 bytes 

startup:
c:\windows\system.ini, [boot] "shell"
old value: Explorer.exe 
new value: explorer.exe Cmmnds32.exe 


tested on Windows 98
December 15, 2004

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.