Nekronos 1.0
(Not detected by KAV for Server on May 18, 2009)
(Trojan-Downloader.Win32.VB.mhp for icon changer.exe)
(not-a-virus:PSWTool.Win32.Dialupass.an for hackdial.exe)
(not-a-virus:PSWTool.Win32.MailPassView.130 for hackmail.exe)
(not-a-virus:PSWTool.Win32.Messen.106 for hackms.exe)
(not-a-virus:PSWTool.Win32.NetPass.q for hacknetpass.exe)
(not-a-virus:PSWTool.Win32.PassView.bj for hackpspv.exe)
by Casjupaya
Released in March 2007
Made in Germany
Server:
dropped files:
c:\WINDOWS\system32\hackdial.exe Size: 40,448 bytes
c:\WINDOWS\system32\hackmail.exe Size: 48,212 bytes
c:\WINDOWS\system32\hackms.exe Size: 47,188 bytes
c:\WINDOWS\system32\hacknetpass.exe Size: 39,936 bytes
c:\WINDOWS\system32\hackpspv.exe Size: 52,736 bytes
tested on Windows XP
March 23, 2007
MegaSecurity