FileShareC
(Trojan.Win32.ShareC)

by ?

Written in Visual C++

Released in November 1997

Hidden share is added to the C drive

Registry
Values added: 6
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Network\LanMan\C$ "Flags" 
Type: REG_DWORD 
Data: 02, 03, 00, 00 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Network\LanMan\C$ "Parm1enc" 
Type: REG_BINARY 
Data: 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Network\LanMan\C$ "Parm2enc" 
Type: REG_BINARY 
Data: 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Network\LanMan\C$ "Path" 
Type: REG_SZ 
Data: C:\ 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Network\LanMan\C$ "Remark" 
Type: REG_SZ 
Data: 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Network\LanMan\C$ "Type" 
Type: REG_DWORD 
Data: 00, 00, 00, 00 
MegaSecurity