|
|
Winshell RAT Information
| Name: |
Winshell |
| Category: |
RAT |
| Alias: |
- Alias: Backdoor.Loselove |
| Advice: |
Remove |
| Risk: |
Elevated Risk
Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. |
| Description:
|
|
| Signatures:
|
process: winshell.exe: MD5 Hash: ba4ce50a036a1964847...
process: winshell.exe: MD5 Hash: b92a038f8ec97532d14...
process: winshell.exe: MD5 Hash: a06ef304b0e2147653c...
process: winshell.exe.eml: MD5 Hash: 0b770ef1e48ca5f4884...
process: ws4maker.exe: MD5 Hash: 3fe2cc7aedc452d71c7...
process: ws_maker.exe: MD5 Hash: c0218d026415a8350cf...
process: winshell.exe: MD5 Hash: 7e5c2a7d9fba104e51a.. |
| Type: |
RAT - A Remote Administration Tool (RAT) is a Trojan type of software that when run, provides an attacker with the capability of remotely controlling a user's computer (victim) over the Internet. The attacker usually has full access to functions on the victim's computer. The victim's computer usually listens on the Internet for the attacker's commands. |
Top RAT Visited Pages:
SubSeven - Alias: BackDoor-G22, BackDoor-Sub7 - 294 visits
NetBus v.1.70 - 209 visits
The Prayer - Alias: BackDoor-DI, Backdoor.Prayer.15 - 75 visits
Cyrex msn trojan - Alias: BackDoor-AOB, Backdoor.VB.dm, Backdoor.VB.dm, Cyrex msn trojan, W32/Delf.B - 69 visits
Global Killer - Alias: Backdoor.GlobalKiller 1.0, Global Killer 1.0 - 55 visits
Systray BackDoor - 53 visits
AutoSpY - Alias: Backdoor.AutoSpy - 49 visits
Secret Agent - Alias: Backdoor.Antinuke.10, Secret Agent 1.0 - 47 visits
Undetected - Alias: Backdoor.tds.4f, Backdoor.tds.se.23, Backdoor.tds.se.23a, Backdoor.tds.se.30, Backdoor.TDS.SE.31, Ba - 42 visits
Netbus - Alias: Backdoor.Netbus - 42 visits
Random RAT Pages:
Carbonator
SMTP Server - Alias: W32/AntiLam.C, SMT 1.0
Deep Throat - Alias: Backdoor.DeepThroat, Backdoor.DeepThroat.11, Backdoor.DeepThroat.21, Backdoor.DeepThroat.31.a, Backd
U321 Backdoor - Alias: Backdoor.Froobot.12
Nirvana - Alias: Visual Killer, VisualKiller
Remote Control 1.7
KWM - Alias: Backdoor.KWM.a, Backdoor.KWM.b
BOWhack
MoonPie - Alias: Backdoor.MoonPie.03, Backdoor.Moonpie.10, Backdoor.MoonPie.10b, Backdoor.MoonPie.11, Backdoor.MoonPi
ChineseHack - Alias: Backdoor.Loselove
|
|
