Home Malware Programs Remote Administration Tools Intruse

Intruse

Posted: March 28, 2006

Several versions of this RAT appeared from April 1999 to February 2000. The pest is written in Delphi applicationming language. A Remote Administration Tool is a special kind of hacker malware, used for remote access and control of other people's PCs. The attacker infects the PC via the e-mail or File and Print Sharing. A "server" allows him to connect via a "client" on his own machine. The functions of a RAT may vary, depending on the needs of the hacker. The author is a hacker called chams. All versions offer the intruder many dangerous and annoying features, including "keylogger", "filemanager", "password capture", etc. Valuable information can be lost or exposed to the intruder.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 intruse.mrc
    2 intruseclient.exe
    3 intruseserver.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionunwind
Loading...