Digital Vampire


Name: Digital Vampire
Aliases: Vampire,
Ports:
Files: Vampire_worm.zip - 16,591 bytes Vampire.exe - Sysmsg332.exe -Thisrocks.zip .exe - Advapi32.dll (?)
Created: Oct 2000
Requires: Icqmapi.dll and VB runtimes - are required to run the worm.
Actions: Worm / ICQ trojan
The source code is distributed in an exe file which is encryptedusing Tripple DES and compressed using the packer SFX. The password =digital vampire. When it tries to send itself to other ICQ users it hidesthe file transfer window.
Versions:
Registers: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
Notes: Works on Windows 95, 98 and ME, together with an IRC software. ˆSource code is available.
Country: written in Great Britain
Program: Written in Visual Basic 6.

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>