New trojan downloader - IRC backdoor

Discussion in 'malware problems & news' started by EraserHW, Apr 18, 2006.

Thread Status:
Not open for further replies.
  1. EraserHW

    EraserHW Malware Expert

    Joined:
    Oct 19, 2005
    Posts:
    588
    Location:
    Italy
    Hello

    There's a new trojan that is spreading on p2p.

    There are some samples of this, with variable size (25600 bytes or 55511 bytes).

    Active.exe is, for example, one name for it.

    There is is a short analysis, done by me, hoping it's correct ;)

    and, another sample

     
    Last edited: Apr 18, 2006
  2. EraserHW

    EraserHW Malware Expert

    Joined:
    Oct 19, 2005
    Posts:
    588
    Location:
    Italy
    Now detected by Kaspersky as:

    Trojan-Proxy.Win32.Horst.af
     
Loading...
Thread Status:
Not open for further replies.