Dark Shadow

Name: Dark Shadow
Aliases: BackOrifice.Trojan,
Ports: 911, 911 (UDP) (ports can not be changed)
Files: Darkshadow.zip - 87,119 bytes Darkshadow.trojan.exe - 180,321 bytes Winfunctions.exe - Server.exe -
Created: Match 2000
Actions: Remote Access
Registers: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
Notes: Works on Windows 95, 98 and ME. Password =
Country: written in the US (??)
Program: Written in Turbo Pascal Encrypted.

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>