Netbot Attacker 1.6
Released 18 years ago. November 2007
Copyright © MegaSecurity
By Warning Security Team
Informations
| From | China |
| Author | Warning Security Team |
| Family | Netbot Attacker |
| Category | Remote Access |
| Version | Netbot Attacker 1.6 |
| Released Date | Nov 2007, 18 years ago. |
Additional Information
Server
Dropped File:
c:\WINDOWS\system32\drivers\svchost.exe
Size: 10,641 bytes
Added to Registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wuauserv "ImagePath"
Old data: %systemroot%\system32\svchost.exe -k netsvcs
New data: %SystemRoot%\system32\drivers\svchost.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv "ImagePath"
Old data: %systemroot%\system32\svchost.exe -k netsvcs
New data: %SystemRoot%\system32\drivers\svchost.exe
Tested on Windows XP
December 27, 2007If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.