Name: Ambush
Aliases: Backdoor.Ambush,
Ports: 10666 (UDP)
Files: - 20,992 bytes - 20,450 bytes - 20,670 bytes Server.exe - 45,056 bytes Client.exe - 32,768 bytes Zcn32.exe - 45,056 bytes
Created: Nov 1999
Requires: VB6 runtime files - are required to run the trojan.
Actions: Remote Access / Downloading trojan
Registers: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Notes: Works on Windows 95, 98, ME and NT. The Ambush client looks very much as BOs client.
Program: Written in Visual Basic 6.0.

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <>