| Name: | SkyDance |
| Aliases: | SKD, |
| Ports: | 4000 (port can be changed) ICMP packets |
| Files: | Skydance2.16b.zip - 267,013 bytes Skydance2_20v.zip - 293,675 bytes Skydance2_20bf.zip - 292,637 bytes Skydance2.23b.zip - 296,332 bytes Skydance2_25bf.zip - 303,060 bytes Skydance2.29b.zip - 302,046 bytes Skydance2.291b.zip - 305,166 bytes Skydance3.03.zip - Skd303ddos.zip - Skyper.zip - 56,471 bytes Skyproxy.zip - 103,494 bytes Skdremover.zip - 100,028 bytes Skyserver 2.16 beta release.exe - 163,840 bytes Skyserver 2.20 beta release.exe - 172,032 bytes Skyserver 2.23 beta release.exe - 176,128 bytes Skyserver 2.29 beta release.exe - 188,416 bytes Skyserver 2.291 beta release.exe - 188,416 bytes Skydance 2.16 beta release.exe - 409,600 bytes Skydance 2.20 beta release.exe - 430,080 bytes Skydance 2.23 beta release.exe - 430,080 bytes Skydance 2.29 beta release.exe - 442,368 bytes Skydance 2.291 beta release.exe - 442,368 bytes Skyper..exe - 122,880 bytes Skyproxy.exe - 208,896 bytes Skdremover.exe - 204,800 bytes Hskdl.dll - 36,864 bytes Skd.exe - Skd.dll - Skdl.dll - 36,864 bytes Mail.vbs - Activex-security-off.vbs - Starturl.vbs - Regkey.vbs - Regkey.txt - ??? bytes |
| Created: | April 2000 |
| Requires: | |
| Actions: | Remote Access / Distributed DoS tool |
| Among the information this trojans steals is a copy of all registrysettings. With the trojan comes Skyper, which is an IGMP-Flooder. The latest version uses ICMP packets to communicate, which makes it impossible to see it in netstat or in most port scanners. | |
| Versions: | 2.0, 2.01, 2.15b, 2.16b, 2.20b, 2.291b, 2.23b, 2.25b, 2.29b, 2.291, 3.01, 3.02, 3.03, |
| Registers: | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ |
| Notes: | Works on Windows 95, 98, ME and NT. Password = |
| Country: | |
| Program: | Written in C++. |