.: Bfpass 2.998 :.

Additional Details

• Coded by: ?
• Version: Bfpass 2.998
• Family: Bfpass 2.998
• Category: Remote Access

MegaSecurity Notes

Installer: BFPASS298.EXE (248.576 bytes)
extracted files: 
Abcbin.exe (48.128 bytes)
Abcset.exe (93.184 bytes)
Benf298.exe (84.480 bytes)

Servers:
c:\WINDOWS\MSBFLET2.EXE 
c:\WINDOWS\MSCVT2.EXE 
c:\WINDOWS\SYSTEM\MSBFRUN2.EXE 
c:\WINDOWS\SYSTEM\MSBFSET2.EXE 

size: 84.480 bytes 

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "MSBenCheck" 
HKEY_CLASSES_ROOT\chm.file\shell\open\command "(Default)" 
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)" 
HKEY_CLASSES_ROOT\scrfile\shell\open\command "(Default)" 
HKEY_CLASSES_ROOT\txtfile\shell\open\command "(Default)" 
c:\windows\win.ini, [windows] "run"