DarkSky


Name: DarkSky
Aliases: Backdoor.DarkSky,
Ports: 5418, 5419, 5419 (UDP), 6267
Files: Darksky.a.zip - Notepad.exe - Iexplore.exe - Sysarchive.exe - Knrel32.exe -
Created:
Requires:
Actions:
Registers: HKEY_LOCAL_MACHINESOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
HKEY_CLASSES_ROOT\txtfile\shell\open\command
HKEY_CLASSES_ROOT\.txt\shell\open\command
HKEY_CLASSES_ROOT\exefile\shell\open\command
HKEY_CLASSES_ROOT\txtfile.txt\shell\open\command
Notes: Works on Windows 95, 98, ME, NT, 2000 and XP.
Country: written in China
Program: Written in Visual C++.

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>