Qaz


Name: Qaz
Aliases: Worm.Qaz, W32.HLLW.Qaz, Notepad, W32/QAZ.worm, Note.com, Qazwsx, W95/Qaz,
Ports: 137 (UDP), 139, 7597 (ports can not be changed)
Files: Qaz.zip - 40,548 bytes Qaz trojan notepad.exe - 120,320 bytes Notepad.exe - 120,320 bytes Qazwsx.hsq - Note.com - [53 kb] - 119,296 bytes - 120,297 bytes - 122,880 bytes
Created: July 2000
Requires:
Actions: Remote Access / Downloading trojan / Worm / Network trojan
Registers: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Notes: Works on Windows 95, 98, ME, NT and 2000.
Country: written in China
Program: Written in Visual C++.

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>