God Message


Name: God Message
Aliases: BackDoor.AB.gen (?), JS.Trojan.WindowBomb,
Ports: 80, 121, 7777 (ports can be changed)
Files: God.zip - 22,065 bytes Godmessage.zip - 23,247 bytes Godmessage3.zip - 20,683 bytes Godmessage4.zip - 12,974 bytes Godmessage4a.zip - Godmessage 4 0.5.zip - Godmessage_priv.zip - Onz.exe - Lcoder.exe - 5,264 bytes Gmv.vbs - Lcoder.hex - Xxencode.com - Short.com - Hex2script.exe - 12,800 bytes Ea.hta - Aimfire.html - Experimental.txt - New.htm -
Created: Oct 1999
Requires:
Actions: Virus / Remote Access / ActiveX trojan / Downloading trojan / Worm / Mail trojan / IRC trojan / Network trojan
Registers: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\
Notes: Works on Windows 95, 98, ME, NT and 2000, together with MS Internet Explorer 5, MS Outlook and mIRC. Password =
Country:
Program: Written in Visual Basic Script (VBS).

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>