.: GWGhost 2.1 :.

Released 20 years, 5 months ago. Dec 2001

By Machine_GW

::actions

I feel lucky I feel lucky (with image)

Additional Details

From: China
Coded by: Machine_GW
Version: GWGhost 2.1
Released date: Dec 2001, 20 years, 5 months ago.
Family: GWGhost
Category: Information Stealer

MegaSecurity Notes

Server:
c:\WINDOWS\SYSTEM\scanregw.exe 

size: 36.608 bytes

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "ScanRegistry" 
Old data: C:\WINDOWS\scanregw.exe /autorun 
New data: C:\WINDOWS\SYSTEM\SCANREGW.EXE /autorun

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.