Just4Fun
Released 20 years, 4 months ago. July 2005
Copyright © MegaSecurity
By Ferry87
                Informations
| From | Germany | 
| Author | Ferry87 | 
| Family | Just4Fun | 
| Category | Remote Access | 
| Version | Just4Fun | 
| Released Date | Jul 2005, 20 years, 4 months ago. | 
| Language | Visual C++, Server compressed with UPX | 
Additional Information
Server:
dropped files:
c:\Documents and Settings\%user%\Local Settings\Temp\Crt2.tmp\browser.cox
size: 66,052 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\Crt2.tmp\Desktop.cox
size: 12,292 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\Crt2.tmp\FerretSys.cox
size: 131,074 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\Crt2.tmp\kccda.cox
size: 25,606 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\Crt2.tmp\KCCLIP.cox
size: 36,869 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\Crt2.tmp\kcdialog.cox
size: 43,011 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\Crt2.tmp\kcedit.cox
size: 40,965 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\Crt2.tmp\kcprint.cox
size: 40,964 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\Crt2.tmp\kcriched.cox
size: 90,115 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\Crt2.tmp\kctaskpr.cox
size: 18,435 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\Crt2.tmp\mooclick.cox
size: 138,243 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\Crt2.tmp\shutdown.cox
size: 49,155 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\Crt2.tmp\taskbar.cox
size: 15,876 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\Crt2.tmp\volume.cox
size: 39,429 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\Crt2.tmp\winmanip.cox
size: 16,387 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\pck1e220246\absturz.bat
size: 367 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\pck1e220246\avkill.bat
size: 5,525 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\pck1e220246\blasterfunktion.bat
size: 18 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\pck1e220246\cncs232.dll
size: 285,696 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\pck1e220246\pskill.exe
size: 122,880 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\pck1e220246\winlog.exe
size: 1,427,693 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\RarSFX0\winservices.exe
size: 1,065,171 bytes 
port: 21, 25, 80, 125, 135, 139, 445, 1025, 3002, 3003, 5000, 12345 TCP
startup: none
tested on Windows XP
July 19, 2005
                    If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.