Home Malware Programs Remote Administration Tools AMS

AMS

Posted: March 28, 2006

RAT means Remote Administration Tool. It is a hacker software, used to gain access to other people's PCs. The hacker usually tries to infect the victim's PC via the e-mail or File and Print Sharing. The main purpose of the attacker is to install a "server" in user's machine, which will allow him to monitor and control all user activities. This virus is written in Visual C++ applicationming language. It originated in March 2003 in China. No wonder, the interface is written in Chinese.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 msinet.exe
    2 xdict.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionunmsi

Related Posts

Loading...