Dark FTP

Name: Dark FTP
Aliases: Backdoor.KE,
Ports: 21, 6667 (ports can be changed)
Files: Darkftp1.0b.zip - 190,683 bytes Darkftp1.1.zip - 193,585 bytes Darkftp1.2.zip - 191,975 bytes Darkftp1.3.zip - 200,227 bytes Darkftp1.4.zip - 200,824 bytes Darkftp1.41.zip - Darkftp1.5.zip - 261,710 bytes Darkftp1.6.zip - 271,016 bytes Darkftp1.65.zip - 629,282 bytes Darkftp1.7.zip - 371,349 bytes Darkftpcfg1.1.zip - 315,725 bytes Darkftp.exe - 433,664 bytes Darkftp.exe - 448,512 bytes Darkftp.exe - 451,584 bytes Darkftp.exe - 458,752 bytes Darkftp1.0b.exe - 362,496 bytes Rundll.exe - Msregscn.exe - 359,936 bytes Msregscn.exe - 361,984 bytes Msregscn.exe - 363,520 bytes Msregscn.exe - 389,120 bytes Dkftp13c.exe - 13,712 bytes Dkftp14c.exe - 13,712 bytes Dkftp15c.exe - 10,992 bytes Dkftp16c.exe - 13,792 bytes Dkftpcfg.exe - 502,272 bytes Dkftp165cfg.exe - 285,696 bytes
Created: Apr 2000
Requires:
Actions: Anti-protection trojan / Remote Access / FTP server / IRC trojan / Hacking tool
Registers: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\DataLogic\ActiveSubControl\
Notes: Works on Windows 95, 98, ME and NT, together with an IRC software and any FTP software. Password =
Country: written in Italy
Program: Written in Delphi 4.
© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>