Home Malware Programs Backdoors Civcat

Civcat

Posted: March 28, 2006

Civcat is a backdoor that gives the attacker unauthorized remote access to a compromised PC.

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}Debug=300000HKEY_LOCAL_MACHINESOFTWAREMicrosoftDirect3DDetect=[encryptedstring]HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServices[servicename]ParametersServiceDll=[filename]
Loading...