.: iRcHaTaN Password Sender 7.1 :.
Released 16 years, 11 months ago. Jul 2005
By ?::actions
Additional Details
- Coded by: ?
- Version: iRcHaTaN Password Sender 7.1
- Released date: Jul 2005, 16 years, 11 months ago.
- Coded in: Visual Basic
- Family: iRcHaTaN Password Sender
- Category: Information Stealer
MegaSecurity Notes
dropped files: c:\WINDOWS\netiu1.dll Size: 9,216 bytes c:\WINDOWS\Spoolsvr.exe Size: 34,343 bytes c:\WINDOWS\system32\mst32init.exe Size: 34,343 bytes c:\WINDOWS\system32\netiu1.dll Size: 9,216 bytes startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{F146C9B1-VMVQ-A9RC-NUFL-D0BA00B4E999} "StubPath" data: C:\WINDOWS\System32\mst32init.exe tested on Windows XP March 16, 2006
Author Words
------------- iRcHaTaN-PS v 7.1 ------------- ** Now Disable GPedit and MsConfig by Check Msconfig Item Disable Auto Login Disable RegEdit Disable System Restore ** Now Send DialUp PassWord ,External Ip Address,Os Name ** Now Send As Email < injection mode > and Fixed PM Bug ** Now Can Open a BackDoor (Listen a Port) to Get Shell From Victim ** Now U Can Bind Server By Another File (As jpg ,exe,txt , ...) ** Now U Can Select Icon ** Now U Can Make a Fake Error For Server ** Auto Update Server in First Logg Off
URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.