S-Trojan
Released 20 years ago. November 2005
Copyright © MegaSecurity
By Sh0ck
                Informations
| Author | Sh0ck | 
| Family | S-Trojan | 
| Category | Remote Access | 
| Version | S-Trojan | 
| Released Date | Nov 2005, 20 years ago. | 
| Language | Visual Basic | 
Additional Information
Server:
dropped file:
c:\WINDOWS\wreg.exe
size: 45,056 bytes 
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "wreg"
data: C:\Windows\wreg.exe 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RUNSERVICES "wreg"
data: C:\Windows\wreg.exe 
attempts to connect to an IRC Server
tested on Windows XP
November 14, 2005
                    If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.