Home / Spyware Encyclopedia / RemoteAdmin.NetCat << Back

Recommendation to Automatically remove RemoteAdmin.NetCat


Our products can remove RemoteAdmin.NetCat and thousands of other Virus and Spyware automatically and instantly.

RemoteAdmin.NetCat Details


  • Category RemoteAdmin
  • Discovered 11/17/2008 11:49:15 AM
  • Modified 10/11/2024 3:28:28 PM
  • Threat Level High
  • Category Description
    These are programs which enables you to remotely work on a computer in real time. Malware programs take control of users' PC and can view, send, read any other program or information.

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
136A1D58.EXE 112511H4X0r Pl4yGr0uNd1.0.0.0d52295d32c95b6db2b83a6dd4f57e201 
7FCFF7F8.EXE 84480????1.0.0.15f2ab9c07939afb2a3ebb265b24894ff1 
ED.exe 27648  fca52e08ee9d25244bc27fc04fa3014a 
svhcost.exe 30720  fc1b5dcdc563a82265519b5663f5aeaa 
C14D4A24.EXE 68608  fb124f4b55cc2c50e03820653dd42312 
b2e.exe 10078  fa3b34e4d089f889cb821f09d9417993 
C4B2832A.EXE 53664  f5ebdc9ab4fcd3481258c33b6c72ce52 
96B35FF9.EXE 38400  f4b05c29b1690c54c88e5aab157a8a75 
nc.exe 59392  ee655dc29405cea75895833bbff99f70 
4BDAE463.EXE 10184  ed0de55f43fc47fd58d4ee0695ce4fb7 

The following Registry Entries were created:
..\Software\Microsoft\Windows\CurrentVersion\Run\\"WinUpdate"\"%WIN.SYS32%\execute.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Winupdate"\"%WIN.SYS32%\winupdate.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"nc"\"%win.sys32%\nc.jpg 127.0.0.1 4444 -e cmd.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"explorer"\""%WIN.SYS32%\explorer.exe""
..\Software\Classes\Clsid\{FE5451A1-ABFE-BF4F-EAFE-0000F8EB1DCC}\(Default)
..\System\CurrentControlSet\Services\SYNTPS\(Default)
..\Software\Classes\Clsid\{c111980d-b372-44b4-8095-1b6060e8c647}\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware