.: MC :.

Released 17 years ago. Oct 2004

By LionD8
MC

Additional Details

  • From: China
  • Coded by: LionD8
  • Version: MC
  • Released date: Oct 2004, 17 years ago.
  • Family: MC
  • Category: Remote Access

MegaSecurity Notes

dropped files:
c:\WINNT\system32\ckini.ini       Size: 512 bytes 
c:\WINNT\system32\msSevTcp.dll    Size: 28,672 bytes 

added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\47
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\48
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MicroCQ



tested on Windows 2000
June 30, 2005

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.