Seeker


Name: Seeker
Aliases: SEEKER.B, JS.Trojan.Seeker.b, JetHome, Troj/JetHome, JS_SEEKER.B, JS/Seeker.B, JS/Seeker.gen,
Ports: 80, 27374 (?)
Files: Runme.hta - [3 - 5 kb]Removeit.hta - Backup1.reg - Backup2.reg - Homereg111.reg - Prefs.js - - 1,244 bytes - 6,275 bytes
Created: Oct 2000
Requires: Windows Scripting Host (WSH) - is required to run the trojan.
Actions: JavaScript trojan
Registers: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default_Page_URL HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Default_Search_URL HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Main\Home Page
Notes: Works on Windows 95 and 98, together with MS Internet Explorer and Netscape Navigator.
Country:
Program: Written in JavaScript.

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>