Archive Helmet Icon Archive A Reconstructed © MegaSecurity Database

Resoil FTP

Released 23 years, 10 months ago. June 2002

Copyright © MegaSecurity

By ReSoiL


Informations
Author ReSoiL
Family Resoil FTP
Category Remote Access
Version Resoil FTP
Released Date Jun 2002, 23 years, 10 months ago.
Language Delphi
Additional Information
Server:
c:\WINDOWS\SYSTEM\Irtray.pif 

size: 258.048 bytes

port: 24464 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Irtray"

Author Information / Description
Secret commands:
----------------

If you create a directory with the name "removeftp" in c:\, the FTP Backdoor and all it's
traces will be erased from the victim and the backdoor will shutdown. The directory you
have created will be deleted too.

If you create a directory with the name "closeftp" in c:\, the FTP Backdoor will be closed
but it will be started after a reboot. The directory you have created will be deleted too.

ReSoiL

This archive is an almost-complete reconstruction of the legendary Mega Security (also known as Kobayashi), a premier 90s-era "Trojan Database" where malware authors once showcased their work. After a decade offline, the site was brought back in August 2024 by its original creator, MasterRat, who authorized the Malware Gallery to host this modernized, searchable version of the collection. While the original site remains available for those seeking a nostalgic, old-school experience, we are proud to continue its legacy here. Full credit and thanks go to MasterRat and the retired Mega Security staff for their years of dedicated work in cataloging these historical samples.