NightKnight
Description NightKnight
It is a dangerous memory resident parasitic stealth virus. It hooks INT 20h, 21h, 27h, 28h, 2Ah, 2Fh and writes itself to the end of COM and EXE files that are accessed. Depending on the system date it deletes the files instead of infecting them. It contains the text string:
Night Knight!
Check other viruses! Be aware! Use Antiviral Software
Backdoor.IRC.Critical
Description Backdoor.IRC.Critical
This is a hidden (hacker's) - remote administration: Backdoor - utility used in a way to control remote workstations.
Backdoor.Katien.a
Description Backdoor.Katien.a
Katien is a backdoor trojan program. The trojan itself is a Windows PE EXE file about 50KB in length and written in Microsoft Visual C++.
Once executed the backdoor program registers itself in the system registry auto-run section:
HKLMSoftwareMicrosoftWindowsCurrentVersionRun
The key name depends on the backdoor variant:
TaskReg = %trojan file name% Service = %trojan file name%
Once this is done Katien then opens a backdoor connection and waits for its master's (person controlling the Trojan program) commands. The Katien backdoor program performs just a few commands:
gets a file from a requested URL
runs a command or specified local file
performs a DoS attack on the requested victim address
terminates itself
The backdoor program has copyright strings (lines) depending on the backdoor variant:
Voyager Alpha Force: Age of Kaiten
Kaiten Win32 API version: contem@efnet
|