Home Malware Programs Remote Administration Tools AHS

AHS

Posted: March 28, 2006

This RAT was created by polish hacker Czajnick in February 2003. The applicationming language is Assembly. Remote Administration Tool is a simple tool, allowing the hacker to control the victim's PC from a distant machine. There are two ways to infect a PC with RAT. Through the File and Print Sharing, or through the e-mail. In both ways, a "client" is being installed in user's computer, allowing the attacker to monitor your activities, copy or remove files etc.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 httpget.sys
    2 httpkhk.dll
    3 httpklg.sys

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionunwindowshttpsubsystem

Related Posts

Loading...