.: Netsys VIP :.

Released 16 years, 4 months ago. Jun 2005

By Zhou Jian

Additional Details

  • From: China
  • Coded by: Zhou Jian
  • Version: Netsys VIP
  • Released date: Jun 2005, 16 years, 4 months ago.
  • Coded in: Delphi
  • Family: Netsys
  • Category: Remote Access

MegaSecurity Notes

Server:
dropped file:
c:\Program Files\NetMeeting\Winservices.exe
size: 396,860 byte

port: 2374 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "application"
data: C:\Program Files\NetMeeting\Winservices.exe  




tested on win2000
July 07, 2005

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.