Archive A Reconstructed © MegaSecurity Database

• a
• b
• c
• d
• e
• f
• g
• h
• i
• j
• k
• l
• m
• n
• o
• p
• q
• r
• s
• t
• u
• v
• w
• x
• y
• z
• other

Server:
dropped file:
C:\WINDOWS\netmsg32.exe

size: 8 KB

port: 6667

startup:
c:\windows\system.ini

*******************************
The Thing 1.6z for GODWILL 
(MODIFIED VERSION)
*******************************

Systems: Win9x/ME/2000/NT 

- we ripped the ICQ notify and hide in task function
+ now it works on NT/2000 and it doesn´t try to auto connect to internet
  (most users have auto dial-up configured)
+ maybe stealth for AV-Software (not tested yet)
+ cool skin!

Usage:
======
Use the server for GODWILL and add ICQ notify feature to the infected page
or use it on victim with static ip

settings:
=========
Port: "6667"
Psw: "gw"
Servername: "netmsg32.exe"

!!!NOTE: U CAN'T CHANGE THE SERVER SETTINGS ANYMORE!!!


TheThing 1.6 by _Blade_
client was modificated with HexEdit only (!!!)

09/12/2000

Authors:
- ·=[KïÐ ÄRCåÐê]=· - UIN: 30111278
- [FLuX]

This archive is an almost-complete reconstruction of the legendary Mega Security (also known as Kobayashi), a premier 90s-era "Trojan Database" where malware authors once showcased their work. After a decade offline, the site was brought back in August 2024 by its original creator, MasterRat, who authorized me to host this modernized, searchable version of the collection. While the original site remains available for those seeking a nostalgic, old-school experience, we are proud to continue its legacy here. Full credit and thanks go to MasterRat and the retired Mega Security staff for their years of dedicated work in cataloging these historical samples.