WinCrash


Name: WinCrash
Aliases: BackDoor.M, Backdoor.Wincrash, W95/Backdoor.WinCrash,
Ports: 21, 2583, 3024, 4092, 5742 (ports can be changed)
Files: Wincrash.zip - 467,246 bytes WinCrash-E.zip - 466,264 bytes Wincrash1.0b.zip - 398,378 bytes Wincrash1.03.zip - 718,736 bytes Wincrash2.0.zip - 1,580,619 bytes Wcupdater.zip - 140,152 bytes Server.zip - 249,513 bytes Server.exe - 296,448 bytes Server.exe - 347,136 bytes Wincrash.exe - 309,248 bytes Wincrash-e.exe - 308,736 bytes Client.exe - 202,240 bytes Cfg95.exe - 79,242 bytes Win32cfg.exe - 4,128 bytes Bad_day.exe - 4,128 bytes Icqfuckerextensions.exe - 164,501 bytes Regedit.exe - Redit.bak - (is the former Regedit.exe file renamed) Setup.exe - 44,608 bytes Setup.ins - 66,760 bytes Wcupdater.exe - 146,432 bytes _inst321.exe - 316,789 bytes _setup.1 - 989,208 bytes _setup.lib - 193,484 bytes
Created: Jan 1999
Requires:
Actions: Anti-protection trojan / Remote Access / Keylogger / Steals passwords / Network trojan / IP scanner
Registers: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\
Notes: Works on Windows 95, 98, ME and NT.
Country: written in Brazil
Program:

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>