Home / Spyware Encyclopedia / RemoteAdmin.NetCat << Back

Recommendation to Automatically remove RemoteAdmin.NetCat


Our products can remove RemoteAdmin.NetCat and thousands of other Virus and Spyware automatically and instantly.

RemoteAdmin.NetCat Details


  • Category RemoteAdmin
  • Discovered 11/17/2008 11:49:15 AM
  • Modified 10/11/2024 3:28:28 PM
  • Threat Level High
  • Category Description
    These are programs which enables you to remotely work on a computer in real time. Malware programs take control of users' PC and can view, send, read any other program or information.

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
136A1D58.EXE 112511H4X0r Pl4yGr0uNd1.0.0.0d52295d32c95b6db2b83a6dd4f57e201 
A7ACB5AC.EXE 95736Beijing Rising Information Technology Co., Ltd.1.0.0.2815e1daf946e3fc7f9aee6511f3b78d74 
7FCFF7F8.EXE 84480????1.0.0.15f2ab9c07939afb2a3ebb265b24894ff1 
49946A03.EXE 126976 1.3.0.273300f0bbec259da89d2124c4a12cdec 
2420B387.EXE 126976 1.3.0.17f8e13d0c15f3c8b0a73f4f14fae74d9 
39819B8E.EXE 90184 1.0.0.0b166a0bb2a2197f365fc37f63507bc11 
ED.exe 27648  fca52e08ee9d25244bc27fc04fa3014a 
svhcost.exe 30720  fc1b5dcdc563a82265519b5663f5aeaa 
7FDA068B.EXE 61440  f61e1289a941abeec1fa42f72c59a1b9 
C4B2832A.EXE 53664  f5ebdc9ab4fcd3481258c33b6c72ce52 

The following Registry Entries were created:
..\Software\Microsoft\Windows\CurrentVersion\Run\\"WinUpdate"\"%WIN.SYS32%\execute.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"Winupdate"\"%WIN.SYS32%\winupdate.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"nc"\"%win.sys32%\nc.jpg 127.0.0.1 4444 -e cmd.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"explorer"\""%WIN.SYS32%\explorer.exe""
..\Software\Classes\Clsid\{FE5451A1-ABFE-BF4F-EAFE-0000F8EB1DCC}\(Default)
..\System\CurrentControlSet\Services\SYNTPS\(Default)
..\Software\Classes\Clsid\{c111980d-b372-44b4-8095-1b6060e8c647}\(Default)

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware