Thing1.6 (d)

Copyright © MegaSecurity

By Blade


Thing1.6 (d)
Informations
From Romania
Author Blade
Family Thing
Category Remote Access
Version Thing1.6 (d)
Additional Information
Server:
dropped file:
C:\WINDOWS\netmsg32.exe

size: 8 KB

port: 6667

startup:
c:\windows\system.ini

Author Information / Description
*******************************
The Thing 1.6z for GODWILL 
(MODIFIED VERSION)
*******************************

Systems: Win9x/ME/2000/NT 

- we ripped the ICQ notify and hide in task function
+ now it works on NT/2000 and it doesn´t try to auto connect to internet
  (most users have auto dial-up configured)
+ maybe stealth for AV-Software (not tested yet)
+ cool skin!

Usage:
======
Use the server for GODWILL and add ICQ notify feature to the infected page
or use it on victim with static ip

settings:
=========
Port: "6667"
Psw: "gw"
Servername: "netmsg32.exe"

!!!NOTE: U CAN'T CHANGE THE SERVER SETTINGS ANYMORE!!!


TheThing 1.6 by _Blade_
client was modificated with HexEdit only (!!!)

09/12/2000

Authors:
- ·=[KïÐ ÄRCåÐê]=· - UIN: 30111278
- [FLuX]

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.