WinSatan


Name: WinSatan
Aliases: Saten, Satan.374784,
Ports: 999, 6667
Files: Winsatan.zip - 189,545 bytes Winsatan.exe - 374,784 bytesFs-backup.exe -
Created: May 1999
Requires:
Actions: FTP server / IRC trojan
Described as a security checker for SATAN. Tries to connect to oneof nine IRC servers and send information about the infected computer tothem.
Versions:
Registers: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\
Notes: Works on Windows 3.1, 95 and 98. (Does NOT work on Windows NT).
Country:
Program: Written in Delphi.

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>