Home Malware Programs Remote Administration Tools FreeGatez

FreeGatez

Posted: March 28, 2006

This is a Remote Administration Tool , used by hackers for gaining access to distant PCs. A RAT application works by a simple but effective principle: the hacker infects the machine with a "server" application via the e-mail or File and Print Sharing computer and can control it, using a "client" on his PC. Several variants appeared from September 2003 to October 2003. This pest is written in Assembly applicationming language. The author is a german hacker called Neonew.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 cln_screenshot.dll
    2 editserver.exe
    3 english.ini
    4 german.ini
    5 neoclient.exe
    6 neowar.chm
    7 protokoller.exe
    8 server.stub1
    9 server.stub2
    10 srv_screenshot.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversioneoprotokoller
Loading...