Archive A Reconstructed © MegaSecurity Database

• a
• b
• c
• d
• e
• f
• g
• h
• i
• j
• k
• l
• m
• n
• o
• p
• q
• r
• s
• t
• u
• v
• w
• x
• y
• z
• other

Server:
dropped file:
c:\WINDOWS\winhost32.exe
size: 24,576 bytes 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\ActiveX Key "StubPath"
data: C:\WINDOWS\winhost32.exe
	
	
tested on Windows XP
July 10, 2005

Changes in 1.3b2
Fixed:
- - injection server left a bat file behind
- - registry manager buffer overflow serverside (oops)
- - injection doesnt run when ran with certain firewalls
Changed:
- - file search results are sent as they are found, not all at once at the end
- - download queue gets subdir list as they come, not recursively all at once
- - new icon by mortimer
- - webdownloader no longer uses wininet api
- - moving guage shit replaced with busy/idle shit
Removed:
- - plugin system
Additions:
- - image spy built into server/client
- - images compressed with aplib
- - auto resume downloads
- - socks4

stm

This archive is an almost-complete reconstruction of the legendary Mega Security (also known as Kobayashi), a premier 90s-era "Trojan Database" where malware authors once showcased their work. After a decade offline, the site was brought back in August 2024 by its original creator, MasterRat, who authorized the Malware Gallery to host this modernized, searchable version of the collection. While the original site remains available for those seeking a nostalgic, old-school experience, we are proud to continue its legacy here. Full credit and thanks go to MasterRat and the retired Mega Security staff for their years of dedicated work in cataloging these historical samples.