Home Malware Programs Remote Administration Tools InCommand

InCommand

Posted: March 28, 2006

InCommand is a large RAT virus family. As the number of the version grows, so does the possibility of infection and the amount of damage that can be done by this application. This pest has a lot of dangerous features: it logs user keystrokes, takes screenshots of user activity, etc. The author of this pest is Stoner and Bogart. Several versions appeared from April 1996 to July 2004. The RAT was written in Delphi applicationming language, and recent versions were compressed.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 -1229473892.exe
    2 7b206d3f.exe
    3 [system
    4 backdoor.incommander.plugin.regedit.a.exe
    5 betaclientc.exe
    6 client.exe
    7 client_12_pw.exe
    8 client_1_1.exe
    9 client_1_3.exe
    10 client_1_4.exe
    11 client_1_5.exe
    12 client_1_53.exe
    13 clientcmpt.exe
    14 editinc.exe
    15 editserver.exe
    16 fixes.txt
    17 icon.dll
    18 incsrv.exe
    19 inf32.dll
    20 info32.exe
    21 lookup.exe
    22 msgform.dfm
    23 msie50h.exe
    24 naplugins.txt
    25 olemon32.exe
    26 readme.txt
    27 readmefirst.txt
    28 regclient.exe
    29 regserv.exe
    30 rsapi.exe
    31 scanner.exe
    32 server.exe
    33 server.txt
    34 server1.4.exe
    35 server1.5.exe
    36 server153.exe
    37 server17-b2.exe
    38 unit1.dfm
    39 vote.txt
Loading...