Home Malware Programs Remote Administration Tools DFch

DFch

Posted: March 28, 2006

This RAT was created by a Polish hacker called Grisch. The attacker infects the PC via the e-mail or File and Print Sharing. A "server" allows him to connect via a "client" on his own machine. The functions of a RAT may vary, depending on the needs of the hacker. This RAT can be classified as very dangerous, because it cal log keystrokes and collect user info. Several versions appeared from November 2001 to July 2004.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 [system
    2 backdoor.grisch.01.a.exe
    3 czytaj.to
    4 dfchclient.exe
    5 dfchedytor.exe
    6 dfchgrischclient.exe
    7 dfchgrischserver.exe
    8 dfm.exe
    9 iosyss.exe
    10 readit.txt
    11 server.exe
Loading...