Código:
- Connection
Connect to: itdoesntmatter.zapto.org:3460:0,
ID: test
Group:
Password: admin
Connect through proxy: No
- Install
HKLM/run Startup: Yes
Entry Name: srccs.exe
Copy File: Yes
File Name: srccs.exe
Copy File To: System Folder
Copy to Alternate Data Streams: Yes
Melt File: Yes
- Advanced
Process Mutex: )!VoqA.I4
Inject Server: Yes
Persistence: Yes
Inject into running process: Yes
Inject into: svchost.exe
Key Logger: Yes
Format: PE
File Alignment: 512
- Build
Icon: No
Execute Third-party Applications: No
còmo puedo desinfectarme?
