Remote Boot Tool details

  • Description

    Remote Boot Tool is a malicious RAT application that consists of server and client. The server runs on the compromised computer and can be used by the attacker to log off current user, reboot or shutdown a PC.

  • Exe

    msgsrv32.exe

  • Registry

    HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunmsgsrv32