NerTe


Name: NerTe
Aliases: Backdoor.NerTe, Backdoor.SG,
Ports: 21, 80, 105 (ports can be changed)
Files: Nerte6.0.4.zip - 856,909 bytes Nerte 7.0.zip - 884,050 bytes Nerte 7.2.zip - 930,149 bytes Nerte7.2.2.zip - Nerte 7.3.zip - 870,090 bytes Nerte 7.40.zip - 1,157,407 bytes Nerte 7.50.zip - 1,163,070 bytes Nerte7.6_win98.zip - Nerte7.6_win2000.zip - Nerte 7.60 nt.zip - 1,212,636 bytes Nerte 7.60 win9x.zip - 1,212,372 bytes Nerte7.7.zip - Nerte 7.70.zip - 851,374 bytes Nerte 7.71.zip - 1,240,700 bytes Nerte.exe - 1,477,120 bytes Nerte1.exe - 1,387,520 bytes Nerte1.exe - 1,466,880 bytes Nerte7.exe - 1,647,104 bytes Nerte77.exe - 1,740,288 bytes Instaluj.exe - 425,472 bytes lient.exe - 1,156,608 bytes Profiles.exe - 652,288 bytes Server.exe - 485,376 bytes Server.exe - 669,184 bytes Server.exe - 726,528 bytes Server.exe - 743,936 bytes Setup.exe - 1,166,489 bytes Setupnt.exe - 1,215,917 bytes Setup9x.exe - 1,212,372 bytes Setup9x.exe - 1,243,987 bytes Nerte.cnt - 595 bytes Nerte.hlp - 65,424 bytes Scanregs.exe - Nsrvnt.exe -
Created: Sep 1999
Requires:
Actions: Remote Access / Keylogger / Steals passwords
Registers: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\
Notes: Works on Windows 95, 98, ME, NT and 2000.
Country: written in Lithuania
Program: Written in Delphi.

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>