| Name: | KWM |
| Aliases: | Backdoor.KWM, |
| Ports: | 21, 1028, 1029, 1030, 1031, 1032, 1033, 1034, 1035, 1036, 1037 |
| Files: | Netcfgh.exe - [69 kb]Photo.scr - Photo.jpg - Sponsors_pay_wm.exe - Contract.txt - Body.lg - List.cmd - Heak.exe - Teen1.exe - Teen2.exe - Teen3.exe - |
| Created: | |
| Requires: | |
| Actions: | Remote Access / Keylogger / Steals passwords / Downloading trojan |
| Registers: | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion |
| HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Internet Settings | |
| Notes: | Works on Windows. |
| Country: | |
| Program: |