Institution FWB 1.2
(Backdoor.Win32.Institon.11)

by Aphex

Written in Delphi

Released on August 25, 2002

more versions


Institution FWB 1.2 by Aphex of EES

This uploader is the perfect tool to manage a massive amount of computers. It injects it's
threads into the windows shell allowing it to run without creating it's own process. Also
this allows the server to access the internet as a trusted application. What could be more
trusted than the windows shell?

The server works with LANs, proxies and routers. The transfer manager is very intuitive.
You can upload files to one or all servers. With a few clicks you can run your file on
thousands of computers. Completely invisble!

Files that end in ".exe" are ran, others are saved.

Also added is a completely new startup method that you haven't seen in any other uploader
to date! It is a group policy setting that WyldFyre found while playing with gpedit.msc.
Then I discovered the corresponding registry key. It only applies to NT/2K/XP and it will
use the standard method of registry run in 95/98/ME.

[email protected]


Server:
size: 56 KB

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "server" 

MegaSecurity