Kuang 2.0
(Trojan.Win32.TrojanRunner.Joiner.h)
(Trojan.PSW.Kuang.c)

by Weird

Made in Yugoslavia

more versions




Server:
dropped files:
c:\WINDOWS\TEMP$1.EXE             size: 7.680 bytes 
c:\WINDOWS\SYSTEM\_webcache_.exe  size: 25.184 bytes 
c:\WINDOWS\SYSTEM\Temp$1.exe      size: 7.680 bytes 

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Temp$1.task"
data: C:\WINDOWS\SYSTEM\Temp$1.exe 

tested on Windows 98

MegaSecurity