Home Malware Programs Remote Administration Tools NetCrack

NetCrack

Posted: March 28, 2006

A Remote Administration Tool is a special kind of hacker malware, used for remote access and control of other people's PCs. This RAT tool was created using the NetCrack Trojan creator. The author is a hacker called Avenger. Many variants appeared from December 2001 to May 2004. The place of origination is Russia. This nasty application affects such operating computers as Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003 and Windows XP. Once inside the computer, it opens a default TCP port 777 or 778 and awaits hacker commands. It can also steal passwords as they are being typed in, download/upload files, change computer parameters, etc. The pest does not affect such operating computers as DOS, Linux, Macintosh, OS/2, UNIX and Windows 3.x.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 0098ac0b.dll
    2 backdoor.haxdoor.e.dll
    3 backdoor.netcrack.13.d.exe
    4 backdoor.netcrack.13.d[2].dll
    5 backdoor.netcrack.13.d[3].dll
    6 backdoor.netcrack.13.d[4].exe
    7 backdoor.netcrack.13.d[5].dll
    8 backdoor.netcrack.13.d[6].dll
    9 backdoor.netcrack.13.e.exe
    10 backdoor.netcrack.13.f.dll
    11 backdoor.netcrack.13.f.exe
    12 backdoor.netcrack.13.f_(45).exe
    13 dialog.in1
    14 editor.dll
    15 editor.exe
    16 gate32.sys
    17 ha.dll
    18 history.txt
    19 icqplugin.dll
    20 jpgcomp.dll
    21 nccdopen.dll
    22 nccdopen.dpr
    23 ncex.dll
    24 ncpasswords.dll
    25 ncscreen.dll
    26 netcrack.exe
    27 readme.txt
    28 server.exe
    29 skin.ini
    30 system.sys
    31 tool.in1
    32 trojandownloader.win32.atmader.10.exe
    33 vrml.exe
    34 xphide.dll
Loading...