.: MP Bus :.

Released 22 years, 3 months ago. Jun 2000

By Carl-Fredrik Neikter

Additional Details

  • Coded by: Carl-Fredrik Neikter
  • Version: MP Bus
  • Released date: Jun 2000, 22 years, 3 months ago.
  • Coded in: Delphi
  • Family: NetBus
  • Category: Remote Acces

MegaSecurity Notes

Server:
dropped file:
c:\WINDOWS\MPOWER.EXE 

size: 494.592 bytes 

port: 650, 651 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "MPOWER" 

added:
c:\WINDOWS\mpowerk.dll

Author Words

Modified Netbus with ports 650 and 651 (instead of 12345 and 123456)
and different named keylogger.

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.