Home Malware Programs Remote Administration Tools NeuroticKat

NeuroticKat

Posted: March 28, 2006

A Remote Administration Tool is a special kind of hacker malware, used for remote access and control of other people's PCs. The attacker infects the PC via the e-mail or File and Print Sharing. A "server" allows him to connect via a "client" on his own machine. The functions of a RAT may vary, depending on the needs of the hacker. Some RATs can't really harm your PC and the only purpose they were made for is hooliganism. But some versions can steal vital information, remove files and even crash your computer. This RAT has the ability to disable some Firewall protection applications. Some versions also can log keystrokes. The author is a hacker called aka_katnhat and Mimic. Several versions appeared from June 2001 to September 2003.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 cgi.txt
    2 client1_2.exe
    3 client1_3.exe
    4 custom.txt
    5 detected.txt
    6 edit_server.exe
    7 editor_readme.txt
    8 error.txt
    9 hosts.ip
    10 importantreadme.txt
    11 log.exe
    12 logger_client.exe
    13 mail_test.exe
    14 nk client 1_1.exe
    15 nk client.exe
    16 password.txt
    17 readme.txt
    18 regentry.txt
    19 server.exe
    20 server1_2.exe
    21 server1_3.exe
    22 smtp.txt
    23 smtpservers.831
    24 thumbs.db
Loading...