Archive Helmet Icon Archive A Reconstructed © MegaSecurity Database

Evilsocks

Released 23 years, 7 months ago. September 2002

Copyright © MegaSecurity

By evilgoat


Evilsocks
Informations
Author evilgoat
Family Evilsocks
Category Remote Access
Version Evilsocks
Released Date Sep 2002, 23 years, 7 months ago.
Language Visual C++
Additional Information
Server:
c:\WINDOWS\server.exe 

size: 8.976 bytes 

port: 1080 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "server"

Author Information / Description
=> evilsocks settings <=

srv file: filename of server to store on remote machine

srv port: port to listen on

srv dir: directory to write to on remote machine, %%WINDIR%% for win dir, %%SYSDIR%% for windows sysdir

userid: applications suck as sockscap for a field for a userid that it sends to the socks server

require userid: if ticked, connections will only be allowed if the userid matches

regkey: name of regkey to write in startup

evilgoat

This archive is an almost-complete reconstruction of the legendary Mega Security (also known as Kobayashi), a premier 90s-era "Trojan Database" where malware authors once showcased their work. After a decade offline, the site was brought back in August 2024 by its original creator, MasterRat, who authorized the Malware Gallery to host this modernized, searchable version of the collection. While the original site remains available for those seeking a nostalgic, old-school experience, we are proud to continue its legacy here. Full credit and thanks go to MasterRat and the retired Mega Security staff for their years of dedicated work in cataloging these historical samples.