Home Malware Programs Remote Administration Tools Net Antrax

Net Antrax

Posted: March 28, 2006

A Remote Administration Tool is a special kind of hacker malware, used for remote access and control of other people's PCs. The attacker infects the PC via the e-mail or File and Print Sharing. A "server" allows him to connect via a "client" on his own machine. The functions of a RAT may vary, depending on the needs of the hacker. Some RATs can't really harm your PC and the only purpose they were made for is hooliganism. But some versions can steal vital information, remove files and even crash your computer. This Brazilian RAT tool was written in Visual Basic applicationming language. Several variants appeared from October 2002 to January 2003.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 ayuda.htm
    2 doc1.htm
    3 faq.htm
    4 installsd.exe
    5 instrucciones.txt
    6 juegos 100.exe
    7 juegos 110.exe
    8 juegos096.exe
    9 messenger-adictos.url
    10 net antrax 096.exe
    11 net antrax 1(www.portalmes.com).exe
    12 net antrax 110.exe
    13 rundll32a.exe
    14 version.txt

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERsoftwaremicrosoftwindowscurrentversionunundll32a
Loading...