Zhangpo

Released 21 years, 11 months ago. October 2002

Copyright © MegaSecurity

By ?


Informations
From China
Author ?
Family Zhangpo
Category Remote Access
Version Zhangpo
Released Date Oct 2002, 21 years, 11 months ago.
Language Visual C++
Additional Information
Dropped file:
c:\WINDOWS\configure.exe 

size: 303.117 bytes

port: 9689 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Config"
data: C:\WINNT\configure.exe

acts as a worm, uses smtp.etang.com to send mail
can restart computer
can format HD
does search for FTP servers on Local Network attempting to transmit fuck.exe

tested on win2000

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.