.: Doing 1.0 :.
Released 17 years, 6 months ago. Jul 2004By jocanor
- Coded by: jocanor
- Version: Doing 1.0
- Released date: Jul 2004, 17 years, 6 months ago.
- Coded in: Visual Basic, Server is compressed with UPX
- Family: Doing 1.0
- Category: Remote Access
Server: dropped files: c:\WINDOWS\DIjpg.dll Size: 413,756 bytes c:\WINDOWS\MSWINSCK.OCX Size: 108,336 bytes c:\WINDOWS\win32api.exe Size: 53,248 bytes port: 7744, 5454 TCP startup: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "win32api.exe" data: C:\windows\win32api.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "win32api.exe" data: C:\windows\win32api.exe tested on Windows XP May 30, 2005
URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at firstname.lastname@example.org, thank you in advance.