.: Phoenix2 1.72 :.
Released 20 years, 9 months ago. Oct 2001By C)DMP & Kaosł
- From: Italy
- Coded by: C)DMP & Kaosł
- Version: Phoenix2 1.72
- Released date: Oct 2001, 20 years, 9 months ago.
- Coded in: Microsoft Visual C++
- Family: Phoenix 2
- Category: Remote Access
Server: dropped files: c:\WINDOWS\Msatrib.EXE size: 217.088 bytes c:\WINDOWS\TEMP\~P2.EXE size: 217.088 bytes startup: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Msatrib" data: C:\WINDOWS\Msatrib.EXE HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce "C:\WINDOWS\TEMP\~P2.EXE" data: C:\WINDOWS\Msatrib.exe /del C:\WINDOWS\TEMP\~P2.EXE tested on Windows 98 November 18, 2004
URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at firstname.lastname@example.org, thank you in advance.