.: Phoenix2 1.60 :.
Released 20 years, 11 months ago. Sep 2001By C)DMP & Kaosł
- From: Italy
- Coded by: C)DMP & Kaosł
- Version: Phoenix2 1.60
- Released date: Sep 2001, 20 years, 11 months ago.
- Coded in: Microsoft Visual C++
- Family: Phoenix 2
- Category: Remote Access
Server: dropped files: c:\WINDOWS\Msatrib.exe size: 204.800 bytes c:\WINDOWS\TEMP\~SRBEZPJ.exe size: 204.800 bytes Port: 7410 TCP added to registry: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Msatrib" data: C:\WINDOWS\Msatrib.exe HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce "~SRBEZPJ" data: C:\WINDOWS\Msatrib.exe /del:C:\WINDOWS\TEMP\~SRBEZPJ.exe tested on Windows 98 November 18, 2004
URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at firstname.lastname@example.org, thank you in advance.