Home Malware Programs Remote Administration Tools Mantis (Shaban)

Mantis (Shaban)

Posted: March 28, 2006

This is a very rare case, when two different authors give the same name to different viruses. The author of this pest is a hacker called Shaban. The origination place of this pest is Turkey. This is a Remote Administration Tool that is used by hackers to control the victim's machine remotely. The possibilities of such application depend on the needs of the attacker. The attacker infects the PC via the e-mail or File and Print Sharing. A "server" allows him to connect via a "client" on his own machine. The functions of a RAT may vary, depending on the needs of the hacker. Some RATs can't really harm your PC and the only purpose they were made for is hooliganism. But some versions can steal vital information, remove files and even crash your computer. Several variants of this pest appeared from July 2000 to March 2002.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 api.bas
    2 form1.frm
    3 form1.frx
    4 form10.frm
    5 form2.frm
    6 form2.frx
    7 form3.frm
    8 form4.frm
    9 form5.frm
    10 form6.frm
    11 form6.frx
    12 form7.frm
    13 form8.frm
    14 form9.frm
    15 mantis.exe
    16 mantis.vbp
    17 mantis.vbw
    18 module1.bas
    19 oku.txt
    20 registry.bas
    21 server.vbp
    22 server.vbw
    23 server1.exe
    24 server2.exe
    25 server3.exe
Loading...