.: Pirate 1.12 :.

Additional Details

• From: China
• Coded by: Mr Army
• Version: Pirate 1.12
• Released date: Feb 2004, 17 years, 8 months ago.
• Coded in: Delphi
• Family: Pirate 1.12
• Category: Remote Access

MegaSecurity Notes

Server:
dropped files:
c:\WINNT\?.exe                 size: 542.720 bytes 
c:\WINNT\system32\WINNT386.EXE size: 542.720 bytes 

port: 1980 TCP

added to registry:
HKEY_CLASSES_ROOT\txtfile\shell\open\command "(Default)"
old data: %SystemRoot%\system32\NOTEPAD.EXE %1 
new data: C:\WINNT\system32\WINNT386.EXE "%1" 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "?"
 data: ? 
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices "?"
data: ? 	


tested on Windows 2000
January 01, 2005