Home Malware Programs Remote Administration Tools Massaker

Massaker

Posted: March 28, 2006

This application was designed for illegal controlling of other people's PCs. The hacker infects the victim's machine via the e-mail or File and Print Sharing with a "server" application. He can later access the infected machine via a "client". The functions of a RAT may vary, depending on the needs of the hacker. Some may just do nasty things, while the user is working. Other can steal vital information and remove files. Once inside the computer, the virus opens a default TCP port 7119 and awaits commands from the intruder. Several versions of this pest appeared in the internet from January 2002 to February 2004. The pest is written in Visual Basic and compressed with UPX. The author of this pest is a hacker called InFeCtiOn. The pest originated in Venezuela. This pest can disable some anti-virus applications. It affects such operating computers as Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP and Windows Me. The users of Windows 3.x, Macintosh, OS/2, UNIX and Linux operating computers are immune.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 ajidmys.srv
    2 backdoor.massaker.11.b.exe
    3 callbackips.exe
    4 massaker.chm
    5 massaker.exe
    6 massakerhelp.chm
    7 readme.txt
    8 server-maker.exe
    9 server.dll
    10 startbutton.exe
    11 winboot.exe
Loading...