PsychWard


Name: PsychWard
Aliases: Backdoor.Psychward, Troj/PsychwardB, BackDoor-CA,
Ports: 3777, 13013, 13014 (ports can be changed)
Files: Psychward.zip - 524,509 bytes Psychward_big.zip - 490,146 bytes Psychward01.zip - 519,278 bytes Psychwardr01.zip - 519,278 bytes Psychwardr02.zip - 528,631 bytes Psychwardr03.zip - 529,364 bytes Psychward03.b.zip - Psychward1.0.zip - Pwclient.exe - 285,184 bytes Pwclient.exe - 294,400 bytes Pwclient.exe - 294,912 bytes Pwclient.exe - 595,456 bytes Pwclient.exe - 632,320 bytes Pwmodify.exe - 122,880 bytes Pwmodify.exe - 237,056 bytes Pwmodify.exe - 239,616 bytes Pwmodify.exe - 299,008 bytes Pwmodify.dat - 68 bytes Pwserver.exe - 6,656 bytes Pwserver.exe - 8,192 bytes Pwserver.exe - 17,952 bytes Pwserver.exe - 18,976 bytes Pwserver.exe - 22,048 bytes Pwserver.exe - 61,440 bytes Win98nuke.exe - 50,728 bytes 2ascii.bin - 30,995 bytes Stat.exe- 22,048 bytes Statexe.zip - 22,320 bytes
Created: Dec 1999
Requires:
Actions: Remote Access / ICQ trojan / IRC trojan
Registers: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Notes: Works on Windows 95, 98, ME and NT, together with mIRC and ICQ.
Country:
Program:

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>