.: Pitfall 2.1 :.

Additional Details

• From: Brazil
• Coded by: IntrudeR
• Version: Pitfall 2.1
• Released date: Aug 2000, 22 years ago.
• Family: Pitfall
• Category: Remote Access

MegaSecurity Notes

Server:
dropped files:
c:\WINDOWS\WININIT.INI         size: 10 bytes 
c:\WINDOWS\SYSTEM\PITFALL.EXE  size: 180.736 bytes 

startup:
HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\Hbgbosocgj "Path"
data: C:\WINDOWS\SYSTEM\PITFALL.EXE 

HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\Hbgbosocgj "Startup"
data: C:\WINDOWS\SYSTEM\ 

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "LoaderW32"
data: C:\WINDOWS\SYSTEM\PITFALL.EXE 

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "LoaderW32"
data: C:\WINDOWS\SYSTEM\PITFALL.EXE 

Server does kill some Anti-Virus Programs (AVP)

tested on Windows 98
November 08, 2004