| Name: | NokNok |
| Aliases: | |
| Ports: | 166, 661, 666 (ports can not be changed) |
| Files: | NokNok.zip - 1,060,564 bytes Noknok5.zip - 1,075,948 bytes Noknok6.zip - 1,114,112 bytes Noknok7.zip - 897,437 bytes Noknok7.2zip - 529,611 bytes Noknok8.0.zip - 504,223 bytes Noknok8.1.zip - 558,759 bytes Noknok8.2.zip - 558,908 bytes Noknok4.exe - 856,016 bytes Noknok5.exe - 1,083,295 bytes Noknok6.exe - 1,381,094 bytes Noknok7.exe - 906,312 bytes Client.exe - 227,328 bytes Client.exe - 281,088 bytes Client.exe - 281,600 bytes Client.exe - 861,696 bytes Client.ini - 40 bytes Server.exe - 287,232 bytes Setup.exe - 233,984 bytes Setup.exe - 287,232 bytes Securpatch.exe - 285,229 bytes Dllfiles.exe - 323,006 bytes Autoexec.b01 - ??? bytes Gui.exe - 309,760 bytes Scanreg.exe - |
| Created: | |
| Requires: | |
| Actions: | Remote Access / IRC trojan |
| The trojan has frequently been propagated under the name Securpatch.exe. The source code is shareware and costs 85 $! It opens sic, seven ports, all starting with a and ending with a 6. Port 661 is used by NokNok´s chat system. Removed entries in the Registry will automatically be added again. NokNok uses mail notification as well as notification by ICQ. | |
| Versions: | 4.0, 5.0, 6.0, 7.0, 7.2, 8.0, 8.1, 8.2, |
| Registers: | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ |
| Notes: | Works on Windows 95, 98 and ME. |
| Country: | written in Germany (?) |
| Program: | Written in Delphi 4 and 5. |