Archive A Reconstructed © MegaSecurity Database

• a
• b
• c
• d
• e
• f
• g
• h
• i
• j
• k
• l
• m
• n
• o
• p
• q
• r
• s
• t
• u
• v
• w
• x
• y
• z
• other

Server:
dropped files:
c:\WINDOWS\cliplog                   size: 1.655 bytes 
c:\WINDOWS\log                       size: 0 bytes 
c:\WINDOWS\SYSTEM\ctrlsys.exe        size: 364.072 bytes 
c:\WINDOWS\SYSTEM\loadqm\ClipLogged  size: 1.655 bytes 
c:\WINDOWS\SYSTEM\loadqm\Logged      size: 0 bytes 

port: 666 TCP

added to registry:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "ICQNet"
data: C:\WINDOWS\System\CTRLSYS.EXE 

HKEY_LOCAL_MACHINE\Software\SpyMasterSnake

Commands:

ADDREG
BEEP
CAPTURE       // ScreenShot
CDROM
CLIPBOARDLOG
DOWNLOADFROMNET
EXPORTREG
EXEC
EXECHIDE
GETCACHEDPASS
HIDETASKBAR
ICQPASS2003
IMPORTREG
KEYBOARDLOCK
KILL
LOG              // KeyLogger
MAXCLIENTS
MSJ              // Chat
MSJOFF
PROCLIST
PLAYWAV
RAS            // Dial-Up S,ifreleri
READREG
RESTARTSERVER 	REMOVESERVER
SEARCH
SENDERROR
SETUSERNAME
SETPASSWORD
SETPORT
SETURL
SETHOMEDIR
SETRUNDIR
SENDKEYS
SENDLOG
SERVERINFO
SERVERHELP
SENDMSG
SHUTDOWN
SHOWTASKBAR
SNDRECORD
SYSINFO
UPDATESERVER
URLHISTORY
WEBCAM
WEBPAGE
VICTIM

Muharremoðlu

This archive is an almost-complete reconstruction of the legendary Mega Security (also known as Kobayashi), a premier 90s-era "Trojan Database" where malware authors once showcased their work. After a decade offline, the site was brought back in August 2024 by its original creator, MasterRat, who authorized the Malware Gallery to host this modernized, searchable version of the collection. While the original site remains available for those seeking a nostalgic, old-school experience, we are proud to continue its legacy here. Full credit and thanks go to MasterRat and the retired Mega Security staff for their years of dedicated work in cataloging these historical samples.