Small-News has Move on a News Hosting, all News have Been Moved, Please Click Small-news to Visit Our New Website

This memory-resident worm propagates by dropping copies of itself in shared network drives.

It steals login information and saves the obtained data in a file, which can be retrieved by a remote user. Its keylogger component substitutes the standard Microsoft Graphical Identification and Authentication DLL (MSGINA.DLL) to carry out its information-stealing routine.

This worm has backdoor capabilities and is able to listen to TCP port 5190 and wait for remote commands.

It runs on Windows 95, 98, ME, NT, 2000 and XP.

Source



Comments | Related Post | Search The Web | Nettingnews | SmallNews(wp) |

Subscribe

Share This | Add to Netvibes | Subscribe with Bloglines | Subscribe to Small News:Get all the News In Small on your cell phone | Small News Feed

Post


Blog

Read more News @ SmallNews Blog (Wordpress.com) and NettingNews and

Google Search

Possibly Related Post

  • No related posts

  • SmallNews @ Newsvine