Mosaic version 2.00
                      
                        Server name: Mosaic 
                        Version: 2.00 
                        Different versions: None 
                        Tested: Yes, on Windows 95 and Windows NT 
                        Server size: 116K 
                        Server files: server.exe 
                        Infects: Windows 95, 98, NT. 
                        Autoloads: Registry:
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
                        CurrentVersion\RunServices\ 
                        Key: Mosaic 
                        Default port: 17166 TCP 
                        Can port be changed: Yes 

                        Server Features 

                        Chat 
                        Send keys 
                        Execute 
                        Open/Close Cd-Rom 
                        Ftp server 
                        View/Close processes 


                        Comments 
                        Mosaic 2.00 is a foreign trojan written in Visual Basic. Not much to
                        say about it. It appears to have basic features. Nothing unusual
                        here. 

                        How To Remove 
                        Quick fix: no quick fix programs 

                        Manual removal: 

                        Remove the Mosaic key in the registry located at
                        HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\
                        CurrentVersion\RunServices. 
                        Which can be done with regedit or any other registry editing
                        program. 
                        Reboot the computer or close MOSAIC.EXE. 
                        Delete the trojan file MOSAIC.EXE in the windows directory.