.: PA HAC Wlam 1.0 Beta :.
Released 18 years, 1 month ago. Jul 2004
By PA HAC::actions
Additional Details
- From: Poland
- Coded by: PA HAC
- Version: PA HAC Wlam 1.0 Beta
- Released date: Jul 2004, 18 years, 1 month ago.
- Coded in: Delphi
- Family: PA HAC
- Category: Remote Access
MegaSecurity Notes
Server: dropped file: c:\WINDOWS\config.exe size: 556.032 bytes port: 1789, 1790, 1711, 1710, 1793, 1794, 1795, 1797, 1798, 1721, 1740, 1796 TCP TCP startup: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "PowerProfile" data: C:\windows\config.exe lines added to autoexec.bat: C:\autoexec.bat "del C:\progra~1\zonela~1\zoneal~1\*.*exe" C:\autoexec.bat "del C:\progra~1\norton~1\*.*dll" C:\autoexec.bat "del C:\progra~1\kerio\Person~1\*.*exe" C:\autoexec.bat "del C:\progra~1\norton~1\*.*exe" C:\autoexec.bat "del C:\progra~1\zonela~1\zoneal~1\*.*dll" C:\autoexec.bat "dir c:"
URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.