Yet Another Trojan 2.24 server

Released 23 years, 11 months ago. September 2001

Copyright © MegaSecurity

By HSE


Informations
From Germany
Author HSE
Family Yet Another Trojan
Category Remote Access
Version Yet Another Trojan 2.24 server
Released Date Sep 2001, 23 years, 11 months ago.
Language Visual Basic
Additional Information
Server:
c:\WINDOWS\charge.exe 

size: 375.557 bytes 

port: 37673 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "Batterieanzeige" 
c:\windows\system.ini, [boot] "shell" 
c:\windows\win.ini, [windows] "run" 

added:
c:\WINDOWS\reg.dat 
c:\WINDOWS\wininit.ini 
c:\WINDOWS\winstart.bat 
c:\WINDOWS\�.bat 
c:\WINDOWS\COMMAND\drvspace.bat 
c:\WINDOWS\COMMAND\msdos.sys 
c:\WINDOWS\SYSTEM\windows.dat


If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.