1. /
  2. Security Response/
  3. Hacktool.Amac

Hacktool.Amac

Updated:
February 22, 2006 11:38:20 PM
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

Hacktool.Amac is a program that scans all the IP addresses on a given network and returns the MAC address of the computer associated with that IP address. It can also change the MAC address of the computer it is installed on.

When the program is installed, it creates the following files:
%ProgramFiles%\PaqTool\amac\afaq.htm
%ProgramFiles%\PaqTool\amac\amac.exe
%ProgramFiles%\PaqTool\amac\faq.htm
%ProgramFiles%\PaqTool\amac\pamq.dll
%ProgramFiles%\PaqTool\amac\PaqBonus.exe
%ProgramFiles%\PaqTool\amac\unins000.dat
%ProgramFiles%\PaqTool\amac\unins000.exe
%ProgramFiles%\PaqTool\amac\wakeup.exe
%ProgramFiles%\PaqTool\amac\winping.exe
%System%\hdvirffo.dll
%UserProfile%\Desktop\a-Mac Address Change.lnk
%UserProfile%All Users\Start Menu\Programs\Amac Address Change\a-Mac Address Change.lnk
%UserProfile%All Users\Start Menu\Programs\Amac Address Change\Uninstall a-Mac Address Change.lnk

The program then creates the following registry subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\A-Mac Address Change_is1
HKEY_LOCAL_MACHINE\SOFTWARE\dapcama

The program can modify the current computers MAC address and scan all IP addresses on the network and return their associated MAC addresses.
Summary| Technical Details

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver