| Name: | Cero |
| Aliases: | Backdoor.Cero, |
| Ports: | 4653 (port can not be changed) |
| Files: | Cerob1.zip - 247,010 bytes Server.exe - 143,360 bytes Ceroclient.exe - 520,192 bytes Editor.exe - 405,540 bytes Meter.ocx - 27,648 bytes Meter.oca - 19,456 bytes Mswinsck.oca - 22,016 bytes Mswinsck.dep - 2,465 bytes Msinet.oca - 29,184 bytes Msinet.dep - 2,407 bytes - 405,505 bytes |
| Created: | Nov 2000 |
| Requires: | Mswinsck.ocx and Msinet.ocx - are required to run the trojan. |
| Actions: | Remote Access / Keylogger / FTP server |
| Registers: | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ |
| Notes: | Works on Windows 95, 98 and ME. |
| Country: | written in the US |
| Program: | Written in Visual Basic 6.0. |