Portal of Doom 
                     
                        Server name: Portal of Doom 
                        Version: V.3 
                        Different versions: None 
                        Tested: Yes, on Windows 95 and Windows NT 
                        Server size: 111K 
                        Server files: ljsgz.exe 
                        Infects: Windows 95, 98, NT. 
                        Autoloads: Registry:
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
                        CurrentVersion\RunServices\ 
                        Key: String 
                        Default port: 3700 TCP 
                        Can port be changed: No 

                        Server Features 

                        Open/Close Cd-Rom 
                        Beep 
                        Open/Close Cd-Rom 
                        Shutdown 
                        File explorer 
                        Move mouse 
                        Swap mouse buttons 
                        Hide taskbar 
                        Kill/Show windows 
                        Screen saver 
                        Key logger 
                        Steal passwords 
                        Open file 
                        Send text 
                        Red box 
                        Sticky caps 
                        File manager 


                        Comments 
                        Portal of Doom V.3 is a lame trojan made by the old Hack City.
                        Who knows why you need to register this trojan, but obviously you
                        can't since Hack City is no more. This is a beta version of the trojan.
                        Nothing new in this trojan. Our version did not write to the registry,
                        but it is suppose to. Also note that this needs a c:\window\system
                        directory. So, if you don't have that directory it may not infect. 

                        How To Remove 
                        Quick fix: no quick fix programs 

                        Manual removal: 

                        Remove the String key in the registry located at
                        HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\
                        CurrentVersion\RunServices 
                        Which can be done with regedit or any other registry editing
                        program. 
                        Reboot the computer or close ljsgz.exe. 
                        Delete the trojan file ljsgz.exe in the windows system directory.