.: Toxic-CV 0.5 :.
Released 17 years, 3 months ago. Feb 2005
By Toxic_Frog::actions

Additional Details
- Coded by: Toxic_Frog
- Version: Toxic-CV 0.5
- Released date: Feb 2005, 17 years, 3 months ago.
- Coded in: Visual Basic
- Family: Toxic-CV 0.5
- Category: Destructive
MegaSecurity Notes
Server: dropped file: c:\WINDOWS\SVCHOST.EXE size: 10,215 bytes added to registry: HKEY_USERS\S-1-5-21-789336058-1957994488-1060284298-1003_Classes\exefile\DefaultIcon "(Default)" data: %1 HKEY_USERS\S-1-5-21-789336058-1957994488-1060284298-1003_Classes\exefile\Shell\Open\Command "(Default)" data: C:\WINDOWS\SVCHOST.EXE %1 %* HKEY_CURRENT_USER\Software\Classes\exefile\DefaultIcon "(Default)" data: %1 HKEY_CURRENT_USER\Software\Classes\exefile\Shell\Open\Command "(Default)" data: C:\WINDOWS\SVCHOST.EXE %1 %* HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\system "DisableRegistryTools" data: 01, 00, 00, 00 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\system "DisableTaskMgr" data: 01, 00, 00, 00 HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" old data: "%1" %* new data: C:\WINDOWS\SVCHOST.EXE %1 %* tested on Windows XP September 10, 2005
URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.