KWM


Name: KWM
Aliases: Backdoor.KWM,
Ports: 21, 1028, 1029, 1030, 1031, 1032, 1033, 1034, 1035, 1036, 1037
Files: Netcfgh.exe - [69 kb]Photo.scr - Photo.jpg - Sponsors_pay_wm.exe - Contract.txt - Body.lg - List.cmd - Heak.exe - Teen1.exe - Teen2.exe - Teen3.exe -
Created:
Requires:
Actions: Remote Access / Keylogger / Steals passwords / Downloading trojan
Registers: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Notes: Works on Windows.
Country:
Program:

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>