PcShare 2005Build0906 VIP
(Backdoor.Win32.PcClient.dy)
(Backdoor.Win32.PcClient.ge)
(Backdoor.Win32.PcClient.ez)
(Backdoor.Win32.PcClient.dd)
(Backdoor.Win32.PcClient.er)

by shesh

Written in Microsoft Visual C++

Released in September 2005

Made in China

more versions


Server:
added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\SYSTEM
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\SYSTEM\0001
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{C46E1AD4-4990-4D7E-9FEF-7D3340940485}\Parameters\Tcpip
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_YTVROWEA\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{C46E1AD4-4990-4D7E-9FEF-7D3340940485}\Parameters\Tcpip


tested on Windows XP
December 20, 2005


MegaSecurity