.: Legend 3.97 :.

Additional Details

• From: China
• Coded by: ?
• Version: Legend 3.97
• Released date: Apr 2002, 20 years, 2 months ago.
• Family: Legend 3.97
• Category: Information Stealer

MegaSecurity Notes

Server:
c:\WINDOWS\SYSTEM\TASKSET.EXE 
c:\WINDOWS\SYSTEM\TASKMOM.EXE 

size: 125.952 bytes 
 
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "TaskMonitor" 
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" 
HKEY_CLASSES_ROOT\txtfile\shell\open\command "(Default)" 
HKEY_CLASSES_ROOT\chm.file\shell\open\command "(Default)" 
c:\windows\win.ini, [windows] "run" 


added:
c:\WINDOWS\MSTASKS.EXE 
c:\WINDOWS\SYSTEM\TASKMOM.EXE 
c:\WINDOWS\SYSTEM\TASKSET.EXE