Archive Helmet Icon Archive A Reconstructed © MegaSecurity Database

Doly 1.1

Released 27 years ago. April 1999

Copyright © MegaSecurity

By A-D-M


Doly 1.1
Informations
Author A-D-M
Family Doly Trojan
Category Remote Access
Version Doly 1.1
Released Date Apr 1999, 27 years ago.
Language Visual Basic
Additional Information
Server:
dropped files:
c:\msdos.win    Size: 0 bytes 
c:\sys.lon    Size: 169,472 bytes 
c:\Memory manger\data.dll     size: 169.472 bytes 
c:\Memory manger\data.z       size: 17.408 bytes 
c:\Memory manger\mem.chk      size: 607.744 bytes 
c:\Memory manger\mem.dll      size: 24.576 bytes 
c:\Memory manger\memmange.exe size: 27.648 bytes 
c:\Memory manger\su.chk       size: 1.417 bytes 
c:\Program Files\MStesk.exe   size: 169.472 bytes 
c:\WINNT\dos.win              size: 24.576 bytes 
c:\WINNT\winstart.bat         size: 70 bytes 
c:\WINNT\system\serv-u.ini    size: 1.417 bytes 
c:\WINNT\system\tesk.exe      size: 169.472 bytes 
c:\WINNT\system\windll16.sys  size: 607.744 bytes 

port: 1011 TCP

added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Ms tesk"
data: c:\Program Files\MStesk.exe 

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "load"
data: c:\windows\system\tesk.exe 

tested on Windows 2000
November 12, 2004

This archive is an almost-complete reconstruction of the legendary Mega Security (also known as Kobayashi), a premier 90s-era "Trojan Database" where malware authors once showcased their work. After a decade offline, the site was brought back in August 2024 by its original creator, MasterRat, who authorized the Malware Gallery to host this modernized, searchable version of the collection. While the original site remains available for those seeking a nostalgic, old-school experience, we are proud to continue its legacy here. Full credit and thanks go to MasterRat and the retired Mega Security staff for their years of dedicated work in cataloging these historical samples.