|
Description:
This memory-resident worm is another variant of the RBOT family that exploits the vulnerabilities discussed in the following pages:
This worm propagates through network shares, and drops a copy of itself as the hidden system file MSNKN.EXE in the Windows system folder. It uses a list of user names and passwords to gain access to shared folders.
It acts as a server program controlled by an Internet Relay Chat (IRC) bot, thus capable of certain backdoor activities. It is also capable of stealing the CD keys of certain applications.
It runs on Windows 95, 98, ME, NT, 2000, and XP.
For additional information about this threat, see:
Solution
Technical Details
Description created: Nov. 7, 2004 12:35:57 PM GMT -0800
Search a new malware
Tell us how we did. Take our quick survey.
|
Save & Share
