Created: DEC 2000
OS: Windows
Location: TBD
Posts Tagged ‘DEC 2000’
Compufon
Posted by FAV™ on February 13th, 2010
Cleaner
Posted by FAV™ on February 4th, 2010
BirdSpy
Posted by FAV™ on December 30th, 2009
Aliases: Backdoor.Win32.BirdSpy.30, Backdoor.Win32.BirdSpy.a, Backdoor.Win32.BirdSpy.b
Variants: (a), (b), 2.0E, 3.0
Port: 39398, 47878, 50829
Size: 22kb
Author: Chiu a.k.a Birdman
Created: DEC 2000
OS: Windows
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Infection: Ndapi32c.dll, winstart.bat, ?.bat, Winbime.scr, WinApp32.exe, Wldap32.dll, Ndapi32K.dll, WinSock.exe, Winbife.scr
Acropolis
Posted by FAV™ on December 5th, 2009
Created: DEC 2000
OS: Windows
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\winport.com\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\UDPPorts\
