Customize - Urban Dictionary Store

Pro Customization

Create unique products with your own words and definitions

Preview

Personalize Your Design

Your Word

Your Definition

This memory-resident Trojan acts as [an Internet] Relay Chat (IRC)
client fileserver and broadcasts itself in the IRC channel irc.dal.net.
It enables a remote user access to an infected user's computer files
via connection to port 46666.

TROJ_TASMER.B

Details:
Upon execution, this Trojan creates [the following] registry entry in the
Windows System directory so that it executes at every system
startup:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\
CurrentVersion\RunTaskManager=“%winsysdir%\tskmngr .exe”

It drops a copy of itself as TSKMNGR.EXE in [the windows] system
directory and then exits. Thereafter, every time the computer is
started, TSKMNGR.EXE executes and runs in the background as a
process. It listens to [Transmission] Control Protocol (TCP) port
46666 and broadcasts itself in the IRC channel irc.dal.net. Once
active, it acts as an IRC client fileserver that any remote user with
the client program can connect to and access.

The Trojan's body contains the following text strings:

tskmngr.exe
Task Manager
ftp -s:c:\flog
%s, %s : USERID : UNIX : %s%c%c
PRIVMSG %s :ctcp &lt;nick&gt; PING 848348, help, getnick
&lt;nick&gt;, getnonick, rnick &lt;nick&gt;!!, sacker time
low_port
high_port addy, jacker time ip ip ip etc, stopsack,

stopjack, spawn filename, ftpget [EVERYTHING],
randnick,
clone, clonedie

Text fits

Menu

Pro Customization

Preview

Personalize Your Design

Shopping Assistant