Mandragore


Name: Mandragore
Aliases: GnutellaMandragore, W32/GnutellaMan, Gnutella worm, Gspot trojan,GnuMan,
Ports: 99
Files: Gspot.exe - 8,192 bytes
Created: 2001
Requires:
Actions: Worm / Gnutella trojan
Searches for users of the Gnutella file sharing network. If a user searches for a file, the worm will send an .exe file with the name searched for. Autostarts using Windows Startup Directory. When beeing active, it becomes an active node within the Gnutella network. The infected nodes easily become overloaded and are unable to answer all requests.
Versions:
Registers:
Notes: Works on Windows 95, 98, ME, NT and 2000, together with Gnutellasoftware.
Country:
Program: Written in Assembler.

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>