Home Malware Programs Remote Administration Tools Fictional Daemon 4.4

Fictional Daemon 4.4

Posted: March 28, 2006

The author of this pest is Patrick van Venetiën. It is written is Visual Basic and released in December 2002. This RAT was created to serve as an FTP server, allowing the intruder to download/upload any files, stored in the infected PC. It also includes a lot of nasty features that allow the attacker to control the machine remotely. This pest originated in December 2002.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 [program
    2 exec.exe
    3 fd.dep
    4 fd.exe
    5 fd.htm
    6 fd.ini
    7 fictionaldaemon.lnk
    8 fictionaldaemonhelpfile.lnk
    9 fictionaldaemonwithdebuglog.lnk
    10 instsrv.exe
    11 ip-poster.exe
    12 license.txt
    13 licenseagreement.lnk
    14 offline.htm
    15 online.htm
    16 srvany.exe
    17 uninstallfd.lnk

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionuninstallfictionaldaemon4.4_is1
Loading...