Archive for the ‘Library’ Category
Legend
C (136)
C.A.N.C.E.R.
Created: MAY 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
C.H.C.B.
Created: AUG 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
C.R.A.T. Pro
Created: JUN 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
C4
Created: MAR 2002
OS: Windows
Location: TBD
C400s FTP
Created: JAN 2004
OS: Windows
Location: TBD
C50a NT
Created: AUG 1999
OS: Windows
Location: TBD
Cab of Filth
Created: FEB 2004
OS: Windows
Location: TBD
Cable Boost
Created: FEB 2000
OS: Windows
Location: TBD
Cabronator
Created: JUL 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
CAFEini
Aliases: Backdoor.Cafeini.08, Backdoor.Cafeini.09, Backdoor.Cafeini.10, Backdoor.Cafeini.11
Variants: 0.8, 0.9, 1.0, 1.1
Port: 51966
Size: 120kb
Author: Brain Storm of Electronic Souls
Created: JAN 2000
OS: Windows 95, 98, NT, 2000
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOne\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce\
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices\
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce\
Infection: bygotit.exe, hemany.exe, mutihaka.exe, pazymi.exe, wilokyl.exe, 196.exe, cafe08pl.exe, cafeclnt.exe, cafeini.exe, cafeiniclient.exe, cafeiniconfig.exe
Call 911
Created: FEB 1996
OS: Windows
Location: TBD
Cain & Abel
Aliases: PWCrack-Cain
Variants: 1.0 BETA, 1.5, 1.51, 2.5 b11, 2.5 b12, 2.5 b13, 2.5 b18, 2.5 b19, 2.5 b21, 2.5 b25, 2.5 b26, 2.5 b29, 2.5 b30, 2.5 b33, 2.5 b34
Port: 666
Size: 174kb
Author: Break-Dance
Created: NOV 1998
OS: Windows 95, 98
Location: TBD
Infection: abel.exe
CamKing
Created: FEB 2005
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Canasson
Created: JUN 1998
OS: Windows
Location: TBD
Canvas
Created: FEB 2002
OS: Windows
Location: TBD
CaraChat
Created: MAR 2001
OS: Windows
Location: TBD
Carbonator
Created: JUL 2002
OS: Windows
Location: TBD
CasinoXO
Created: APR 2002
OS: Windows
Location: TBD
Cast-256
Created: JUL 1999
OS: Windows
Location: TBD
Casus
Created: OCT 1998
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Catfod
Created: AUG 1993
OS: Windows
Location: TBD
Catman
Created: MAR 1998
OS: Windows
Location: TBD
Cattivik FTP
Created: FEB 2000
OS: Windows 95, 98, ME
Location: DNR
CAU Zine
Created: AUG 1996
OS: Windows
Location: TBD
Caznova Spy IRC
Created: MAY 2003
OS: Windows
Location: TBD
CBrowser
Created: FEB 2003
OS: Windows
Location: TBD
CC
Created: JUL 2002
OS: Windows
Location: TBD
CC Invader
Created: SEP 1999
OS: Windows 95, 98, ME
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
CC_MD
Created: APR 2004
OS: Windows
Location: TBD
CCCP
Created: OCT 2003
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
CD-ROM
Created: MAY 2003
OS: Windows
Location: TBD
CDA
Created: FEB 2004
OS: Windows
Location: TBD
CDU
Created: JUN 2002
OS: Windows
Location: TBD
Ceco – Net 666
Created: FEB 1998
OS: Windows
Location: TBD
Celine
Created: FEB 2001
OS: Windows
Location: TBD
Cero
Created: NOV 2000
OS: Windows
Location: TBD
CGI Wrap
Created: SEP 1997
OS: Windows
Location: TBD
Changing Bytes
Created: APR 2001
OS: Windows
Location: TBD
Chaos Device
Created: JAN 1997
OS: Windows
Location: TBD
Chaos Scan
Created: JUL 1997
OS: Windows
Location: TBD
Charge
Created: FEB 2005
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce\
Chat
Created: JAN 1995
OS: Windows
Location: TBD
Chat Power
Created: APR 1998
OS: Windows
Location: TBD
Chat1
Created: APR 2002
OS: Windows
Location: TBD
ChatMaster
Created: JUN 2001
OS: Windows
Location: TBD
ChatSpy
Created: MAR 2002
OS: Windows
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
Check SysLog
Created: OCT 2000
OS: Windows
Location: TBD
China
Created: MAR 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
ChineseHack
Created: APR 2002
OS: Windows
Location: TBD
ChkExploit
Created: SEP 1997
OS: Windows
Location: TBD
Chonker
Created: MAR 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Chupacabra
Created: OCT 1999
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
HKU\.Default\Software\Microsoft\Windows\CurrentVersion\Run\
CIA
Created: DEC 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA855-CC51-11CF-AAFA-00AA00B6017B}\
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices\
CIH
Aliases: “The CIH or Chernobyl Virus”, CIH.Spacefiller, PE_CIH, PE_CIH.1049, Univ.B, Univ.EH, W32.CIH.1003.A, W32.CIH.1019.C, W32.CIH.1026, W32.CIH.1035, W32.CIH.1040, W32.CIH.1042, W32.CIH.1103, W32.CIH.1230, W32.Spybot.IBS, W32/CIH.1230.intended, W95.CIH.1003, W95.CIH.1049, Win32.CIH, Win32.CIH!remnants, Win32.Rbot.CIH, Win32.Silly.Dl, Win32.SillyDl.CIH, Win95.CIH, Win95.CIH.973, Win95.CIH.1003, Win95.CIH.1003.A,, Win95.CIH.1003.B, Win95.CIH.1003.D, Win95.CIH.1010, Win95.CIH.1019, Win95.CIH.1019.B, Win95.CIH.1024, Win95.CIH.1026, Win95.CIH.1035, Win95.CIH.1040, Win95.CIH.1042, Win95.CIH.1049, Win95.CIH.1122, Win95.CIH.1129, Win95.CIH.1230, Win95.CIH.1262, Win95.CIH.1297, Win95.CIH.1363, Win95.CIH.1674, Win95.CIH.1674.int, Win95.CIH.Int5.1230, Win95.CIH.Src, Win95.CIH.family, Win95.CIH.intended, Win95.CIH.remnants, Win95.FCIH, Win95.FCIH.1230, Win95.TNNCIH
Size: 91kb
Author: Chen Ing-hau
Created: JUN 1998
OS: Windows
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Sys Personal Firewall\
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Sys Personal Firewall\
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\Sys Personal Firewall\
Infection: -902795538.bat.com, 6d8dd835b17a955a3508577522b67ead.exe, 1163782084.exe, PBRUSH.exe, a647cef07f186833b396dcaa4f5e1359.exe, alibaba-check.exe, avichop.exe, b2b4362dd920491d9002902fc7026950.exe, cih_13.exe, claveaccess.exe, click20122.jpg, click20209.jpg, click20235.jpg, cnote.exe, cock4.jpg, cock31.jpg, damn_acid3_kg.exe, damn_soundforge50b_kg.exe, dansbig3741.jpg, dbanner7.gif, eia-pmacalc.v1.2-keygenerator.exe, exploit-mime.gen.b_3.exe, ezcd creator plat5.rar, false.scr.exe, keygen.exe, mk4train.exe, scan.exe, self extracting divx kit.exe, sendgraphicsms[2].htm, sendsms[2].htm, seroxat.exe, setup.exe, thunder v3.0 – killer attack.exe, tnn.cih.exe, trainer.exe, trojan horses.exe, win95.cih.973.exe, win95.cih.1003.b.exe, win95.cih.1019.c.exe, win95.cih.1026.exe, win95.cih.1042.exe, win95.cih.1129.exe, win95.cih.1230.exe, win95.cih.1262.exe, win95.cih.exe, win95.cih.src.exe, windowguard32.exe
Claes
Created: APR 2001
OS: Windows
Location: TBD
Clandestine
Created: JUN 2001
OS: Windows
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
Cleaner
Created: DEC 2000
OS: Windows
Location: TBD
ClepToManiacos
Created: MAR 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
ClickMe
Created: JAN 2000
OS: Windows
Location: TBD
Click ‘N’ Show
Created: AUG 1999
OS: Windows 95, 98, NT
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Clix0r
Created: JAN 2004
OS: Windows
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
Clop
Created: DEC 2000
OS: Windows
Location: TBD
CMD Backdoor
Created: NOV 2002
OS: Windows
Location: TBD
CMJSpy
Created: AUG 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
CN Remote Control
Created: MAR 2004
OS: Windows
Location: TBD
CNK
Created: MAY 2000
OS: Windows
Location: TBD
Cobalt
Created: MAR 2000
OS: Windows
Location: TBD
Code_14
Created: OCT 2003
OS: Windows
Location: TBD
Codex TCP/IP Hacker
Created: JAN 1997
OS: Windows
Location: TBD
CokeGift
Created: OCT 2002
OS: Windows
Location: TBD
Cold Client Server
Created: SEP 1999
OS: Windows
Location: TBD
Cold Fusion
Created: DEC 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{tt9381D8F2-0288-11D0-9501-00AA00B911A5}\
Coldir
Created: DEC 2002
OS: Windows
Location: TBD
ColorMatch
Created: OCT 2002
OS: Windows
Location: TBD
Coma
Created: MAR 1999
OS: Windows 95, 98
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Comando
Created: MAY 2001
OS: Windows
Location: TBD
ComAnywhere
Created: AUG 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
ComLoad
Created: DEC 2002
OS: Windows
Location: HKCR\Comload.loader\
HKCR\Comload.loader.1\
HKCR\Comload.loader2\
HKCR\Comload.loader2.1\
HKCR\dctl\
HKCR\CLSID\{9E1089BC-1AE8-4685-8D77-6721E5C318A8}\
HKCR\CLSID\{AD7FAFB0-16D6-40C3-AF27-585D6E6453FD}\
HKCR\Interface\{19E91D82-7AD7-419F-866A-58C122DB1459}\
HKCR\Interface\{F5F779A9-24E5-4BCD-9AE5-6313D4B5AC24}\
HKCR\TypeLib\{266F948A-3DEE-4270-8F55-E79ACCD569FA}\
Command and Control
Created: MAR 2000
OS: Windows
Location: TBD
Command Center
Created: JAN 2001
OS: Windows
Location: TBD
Commfix
Created: AUG 1999
OS: Windows
Location: TBD
ComPain
Created: OCT 2002
OS: Windows
Location: TBD
Company Where
Created: FEB 2004
OS: Windows
Location: TBD
Compufon
Created: DEC 2000
OS: Windows
Location: TBD
ConfigSys
Created: JUN 2001
OS: Windows
Location: TBD
Connect4
Created: AUG 2001
OS: Windows
Location: TBD
Connection
Created: MAY 2000
OS: Windows 95, 98, NT
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
Connector
Created: JUN 1998
OS: Windows 95, 98, NT
Location: TBD
Contempt
Created: APR 2002
OS: Windows
Location: TBD
Control Total
Created: AUG 2000
OS: Windows 95, 98, ME
Location: TBD
Control-It
Created: JUL 2000
OS: Windows
Location: TBD
ControlPanel
Created: JUL 2000
OS: Windows
Location: TBD
CooCoo
Created: MAY 2003
OS: Windows
Location: TBD
Cookie Monstor
Created: NOV 2002
OS: Windows
Location: TBD
Cool Remote Control
Created: AUG 2001
OS: Windows
Location: TBD
CoolCat
Created: OCT 2001
OS: Windows
Location: TBD
CoreServer
Created: FEB 2003
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Corkscrew
Created: JUN 2000
OS: Windows
Location: TBD
Corrupted Lite
Created: APR 2003
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Corsaro
Created: DEC 2002
OS: Windows
Location: TBD
Courz
Created: JUN 2000
OS: Windows
Location: TBD
Covina
Created: APR 2004
OS: Windows
Location: TBD
CPF
Created: NOV 1998
OS: Windows
Location: TBD
CPU Hog
Created: AUG 1998
OS: Windows
Location: TBD
Crack Pipe
Created: AUG 1999
OS: Windows
Location: TBD
CrackDown
Created: FEB 2001
OS: Windows
Location: DNR
Crash a Pentium 2
Created: AUG 1998
OS: Windows
Location: TBD
Crash.Dr
Created: JAN 2000
OS: Windows
Location: TBD
Crazy
Created: NOV 2002
OS: Windows
Location: TBD
Crazy CD Tray
Created: FEB 2005
OS: Windows
Location: TBD
Crazy Evolution 2k
Created: JUL 1998
OS: Windows 95, 98, NT
Location: TBD
CrazyBull
Created: FEB 2005
OS: Windows
Location: TBD
CrazzyNet
Created: JUL 2000
OS: Windows
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
CRS
Created: JUN 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
CS
Created: JUL 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
CSA
Created: SEP 2000
OS: Windows
Location: TBD
CSCommand
Created: APR 2001
OS: Windows
Location: TBD
CST
Created: MAY 2000
OS: Windows
Location: TBD
Cure
Created: MAR 2003
OS: Windows
Location: TBD
Cure ICQ
Created: MAR 2004
OS: Windows
Location: TBD
Cure Rus
Created: DEC 2000
OS: Windows
Location: TBD
CWM
Created: JAN 2001
OS: Windows
Location: TBD
Cx2 DDos
Created: JAN 2002
OS: Windows
Location: TBD
Cyanure
Created: SEP 2002
OS: Windows
Location: TBD
Cyber Censor
Created: FEB 1999
OS: Windows 95, 98, NT
Location: TBD
Cyber Takeover
Created: JUL 2000
OS: Windows
Location: TBD
Cyber-Hazard
Created: AUG 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
CyberJack
Created: APR 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
CyberKit
Created: MAR 1999
OS: Windows
Location: TBD
CyberMattixx
Created: DEC 2000
OS: Windows
Location: TBD
CyberPaky
Created: FEB 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run\
CyberSensor
Created: JUL 2000
OS: Windows NT
Location: TBD
CyberSpy
Created: MAR 2001
OS: Windows
Location: HKLM\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
CyDoor Dummie
Created: JAN 2003
OS: Windows
Location: TBD
Cyn
Created: APR 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Cyrex
Created: NOV 2002
OS: Windows
Location: TBD
D (148)
D-Death
Created: NOV 2001
OS: Windows
Location: TBD
D-Tran
Created: NOV 2002
OS: Windows
Location: TBD
D.I.R.T.
Created: FEB 1998
OS: Windows
Location: TBD
D0ped
Created: SEP 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
D4v3′5 Cl13n7
Created: APR 2002
OS: Windows
Location: TBD
D86asm
Created: DEC 2002
OS: Windows
Location: TBD
DAC Mp3
Created: JAN 2003
OS: Windows
Location: TBD
DaCryptic
Created: MAR 2001
OS: Windows
Location: HKCR\exefile\shell\open\command\
Dagger
Created: OCT 2000
OS: Windows 95, 98
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
DAI
Created: DEC 2000
OS: Windows
Location: TBD
Danton
Created: MAR 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
DaoDan
Created: MAY 2000
OS: Windows
Location: TBD
Dark
Created: JAN 2001
OS: Windows
Location: TBD
Dark Connection Inside
Created: DEC 1999
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
Dark FTP
Created: APR 2000
OS: Windows 95, 98, NT
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
HKLM\Software\DataLogic\ActiveSubControl\
Dark Omen
Created: JAN 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
Dark Sill
Created: NOV 2002
OS: Windows
Location: TBD
Darkalog
Created: FEB 1996
OS: Windows
Location: TBD
DarkFace
Aliases: Backdoor Program.LC, Backdoor.Antilam.g1, Backdoor.Antilam.g1, Backdoor.Delf.hw, Backdoor.Pestdoor.31, Backdoor.Pestdoor.31, Backdoor/Latinus_Server_family, BackDoor-AED, Bck/Antilam.g1
Variants: 2.0, 2.1
Author: Killerbeat
Created: JUN 2002
OS: Windows
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ HKLM\software\microsoft\windows\currentversion\run\ms html\ HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\
Infection: darkface.exe, darkfaceportscanner.exe, darkserver.exe, edtsrv.exe, readme.txt, mshtml.exe
Darkness
Created: OCT 2002
OS: Windows
Location: TBD
DarkNova
Created: SEP 2002
OS: Windows
Location: TBD
DarkPortal
Created: SEP 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
DarkShadow
Created: MAR 2000
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
DarkSky
Created: AUG 2000
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
HKCR\txtfile\shell\open\command\
HKCR\exefile\shell\open\command\
DarkSun
Created: JAN 2000
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
HKCR\txtfile\shell\open\command\
Dat Killer
Created: SEP 2001
OS: Windows
Location: TBD
Data
Created: JUN 2001
OS: Windows
Location: TBD
Data Pipe
Created: AUG 1999
OS: Windows
Location: TBD
DataPac Hacker
Created: FEB 1992
OS: Windows
Location: TBD
DataRape
Created: AUG 1996
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
DataSet Remote Control
Created: FEB 2005
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
DataSpy Network X
Created:
OS: Windows
Location: TBD
David
Created: SEP 2001
OS: Windows
Location: TBD
Dcide Privacy Companion
Created: NOV 1999
OS: Windows
Location: TBD
DDI
Created: APR 2001
OS: Windows
Location: TBD
Dead Bolt
Created: SEP 2001
OS: Windows
Location: TBD
Dead Pool
Created: NOV 2001
OS: Windows
Location: TBD
DeadCow
Created: MAR 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Death
Created: MAR 1998
OS: Windows
Location: TBD
Death for All
Created: MAR 1998
OS: Windows
Location: TBD
DeathBot
Created: FEB 2003
OS: Windows
Location: TBD
DeathPR
Created: AUG 2001
OS: Windows
Location: TBD
Deaths Corner
Created: MAY 2003
OS: Windows
Location: TBD
Decimation
Created: MAR 2004
OS: Windows
Location: TBD
Deep BO
Created: SEP 1998
OS: Windows 95, 98, NT
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
Deep Throat
Aliases: Backdoor.DeepThroat, Backdoor.DeepThroat.11, Backdoor.DeepThroat.21, Backdoor.DeepThroat.31.a, Backdoor.DeepThroat.b, Backdoor.DeepThroat.c, Backdoor.DeepThroat.h, Win32.TrojanRunner.c, Win32.TrojanRunner.Joiner.i
Variants: 1.0, 2.0, 2.1, 3.0, 3.1, 3.1 Lite
Port: 999, 2140, 3150, 6670 – changeable
Size: 479kb
Author: ^Cold^ of DarkLIGHT Corp
Created: FEB 1998
OS: Windows 95, 98, NT, ME, 2000
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Infection: pddt.dat, systemio.exe, acde.dat, acdt.dat, systray.exe
Default BIOS
Created: JUL 2000
OS: Windows
Location: TBD
Deftcode
Created: JAN 2002
OS: Windows 95, 98, NT, ME, 2000, XP
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Del AutoExec
Created: SEP 1998
OS: Windows
Location: TBD
Del DOS
Created: FEB 1996
OS: Windows
Location: TBD
Del INI
Created: JAN 2001
OS: Windows
Location: TBD
Del Sys
Created: MAR 1999
OS: Windows
Location: TBD
DelAOL
Created: FEB 2000
OS: Windows
Location: TBD
Delf
Created: JUL 2004
OS: Windows
Location: TBD
Delfile1.Cab
Created: JAN 1998
OS: Windows
Location: TBD
Infection: delfile1.cab
Delfile2.Cab
Created: FEB 1998
OS: Windows
Location: TBD
Infection: delfile2.cab
Delta Remote Access
Created: SEP 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Delta Source
Created: MAR 1999
OS: Windows 95, 98
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
DelTree Y
Created: JUL 1999
OS: Windows
Location: TBD
DelWinINI
Created: MAY 2000
OS: Windows
Location: TBD
Der Spaeher
Created: AUG 1998
OS: Windows
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Derek
Created: DEC 2000
OS: Windows
Location: TBD
Ders
Created: DEC 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
DES ActiveX Control
Created: JAN 2001
OS: Windows
Location: TBD
DeskCam
Created: OCT 2002
OS: Windows
Location: TBD
Destroyer NT
Created: NOV 1999
OS: Windows NT
Location: TBD
Destruktor
Created: DEC 2002
OS: Windows
Location: TBD
Devil
Created: SEP 1998
OS: Windows 95, 98, NT
Location: DNR
Devil6
Created: FEB 2004
OS: Windows
Location: TBD
Dewin
Created: JAN 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
DFch
Created: NOV 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
DFM
Created: APR 2002
OS: Windows
Location: TBD
Diablo Trainer
Created: APR 1997
OS: Windows
Location: TBD
Dial-Up Raper
Created: FEB 2005
OS: Windows
Location: TBD
Dichas
Created: JAN 2000
OS: Windows
Location: TBD
Dick
Created: APR 2004
OS: Windows
Location: TBD
Dickler
Created: FEB 2000
OS: Windows
Location: TBD
Die Hard Horse
Created: AUG 2001
OS: Windows
Location: TBD
Die Loser
Created: NOV 2002
OS: Windows
Location: TBD
Diego
Created: DEC 2000
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
Diem’s Mutter
Created: NOV 2000
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Diesel
Created: APR 2002
OS: Windows
Location: TBD
Digital Hand
Created: MAY 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Digital Hybrid
Created: MAY 2001
OS: Windows
Location: TBD
Digital RootBeer
Created: AUG 1999
OS: Windows 95, 98
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\1999 –=[???t???-M?N]=–\
Digital Spy
Created: APR 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Digital Upload
Created: NOV 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\12112-121312-12342-13432\StubPath\
DigitalSpawn
Created: MAY 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
DimBUS
Created: APR 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Internat32\
Direct
Created: MAR 1986
OS: Windows
Location: TBD
Direct Connection
Created: DEC 2000
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Disk Is Dead
Created: FEB 2004
OS: Windows
Location: TBD
Disk Space
Created: FEB 1996
OS: Windows
Location: TBD
DiskKill
Created: MAR 1995
OS: Windows
Location: TBD
Dispose
Created: APR 2004
OS: Windows
Location: TBD
Divine
Created: OCT 1997
OS: Windows
Location: TBD
Diwali
Created: NOV 2001
OS: Windows
Location: TBD
Dizer
Created: SEP 2001
OS: Windows
Location: TBD
DKAngel
Created: SEP 2001
OS: Windows
Location: TBD
DLL32
Created: FEB 2003
OS: Windows
Location: TBD
DLP
Created: FEB 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
DLSrv
Created: APR 2002
OS: Windows
Location: TBD
DLX WebDownloader
Created: JUN 2002
OS: Windows
Location: TBD
DNS
Created: JAN 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
DNS ID
Created: SEP 2000
OS: Windows
Location: TBD
Dobol
Created: SEP 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\
Doly
Created: MAY 1999
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Doly\
Doly Remover
Created: OCT 1999
OS: Windows
Location: TBD
Dominador
Created: MAR 2000
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
Donald Dick
Created: MAR 1999
OS: Windows 95, 98, NT
Location: HKLM\System\CurrentControlSet\Services\VxD\VMLDIR\
HKLM\System\CurrentControlSet\Control\Session Manager\
DontRun
Created: FEB 2004
OS: Windows
Location: TBD
Doom & Gloom
Created: FEB 1996
OS: Windows
Location: TBD
Door
Created: DEC 2002
OS: Windows
Location: TBD
DOS Problem
Created: MAR 2004
OS: Windows
Location: TBD
Dosh
Created: FEB 2005
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
DoShit
Created: SEP 2001
OS: Windows
Location: TBD
Dosin
Created: OCT 2002
OS: Windows
Location: TBD
DOS Kill
Created: APR 1999
OS: Windows
Location: TBD
Double Helix
Created: JUL 2003
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
DoubleDutch
Created: SEP 2002
OS: Windows
Location: TBD
DoubleWrite
Created: MAR 1998
OS: Windows
Location: TBD
Downhill Demo
Created: FEB 2000
OS: Windows
Location: TBD
DP
Created: JUL 2000
OS: Windows
Location: TBD
DPTI
Created: JUN 1999
OS: Windows
Location: TBD
Dragon
Created: JAN 2001
OS: Windows
Location: TBD
Dragon’s Revenge
Created: OCT 2002
OS: Windows
Location: TBD
DRAT
Created: NOV 1999
OS: Windows
Location: HKCR\exefile\shell\open\command\
Draw
Created: MAR 1992
OS: Windows
Location: TBD
DRCS
Created: MAY 2004
OS: Windows
Location: TBD
Dreb
Created: MAR 2004
OS: Windows
Location: TBD
Dreeb
Created: APR 1997
OS: Windows
Location: TBD
Drive The Bus
Created: OCT 1998
OS: Windows
Location: TBD
Driver
Created: MAR 2004
OS: Windows
Location: TBD
DrpScan
Created: SEP 1997
OS: Windows
Location: TBD
DrSort
Created: AUG 1999
OS: Windows
Location: TBD
DSNX
Created: MAY 2001
OS: Windows
Location: TBD
DSocks
Created: MAY 2003
OS: Windows
Location: TBD
DT
Created: MAR 1999
OS: Windows
Location: TBD
DTr
Created: SEP 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Du Remote PC
Created: JUL 2000
OS: Windows
Location: TBD
Dua Ti Choi
Created: JUN 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
DuckToy
Created: MAR 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Duddie
Created: AUG 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Dude
Created: FEB 2005
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Durell
Created: MAR 2004
OS: Windows
Location: TBD
DuRPC
Created: JUN 2000
OS: Windows
Location: TBD
DXM SMTP
Created: MAR 2003
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Dynod
Created: AUG 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
E (120)
E-Card Viewer
Created: SEP 2002
OS: Windows
Location: TBD
e-Surveiller
Aliases: Backdoor.VB.iq
Variants: 1.0
Port: 113, 438
Size: 2kb
Author: e-Surveiller Team
Created: AUG 2003
OS: Windows
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\
Eagle Boy
Created: MAR 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Earthquake
Created: DEC 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Easy
Created: FEB 2004
OS: Windows
Location: TBD
Easy Zip 2000
Created: MAY 2000
OS: Windows
Location: TBD
EasyNet
Created: MAR 2003
OS: Windows
Location: TBD
EasyServ
Created: DEC 2001
OS: Windows
Location: HKLM\Microsoft\Windows\CurrentVersion\Run\
EasyTroj
Created: APR 2003
OS: Windows
Location: TBD
Eatflu.c
Created: FEB 1996
OS: Windows
Location: TBD
Eatonway
Created: APR 2004
OS: Windows
Location: TBD
Eatrich.946
Created: JUN 2000
OS: Windows
Location: TBD
eBlaster
Author: SpectorSoft
Created: AUG 2003
OS: Windows
Location: HKCR\CLSID\{6314E760-E667-11d2-BA98- 0080C8E9491A}\OLE\Shell\Commands\
HKCR\CLSID\{DECA39C1-F713-11D2-BA99-0080C8E9491A}\InprocServer32 \
Infection: MSWEBHLP.DLL,mstv9swin.dll, mstv9swin.ocx, winmstv9swin.drv
ECat.a
Created: MAY 1998
OS: Windows
Location: TBD
ECat.b
Created: OCT 2002
OS: Windows
Location: TBD
ECBA
Created: AUG 1991
OS: Windows
Location: TBD
Eclipse 2000
Aliases: Iridium, Backdoor.Eclipse, Backdoor.Eclipse.b, Eclipse2000
Variants: 1.27
Created: AUG 1999
OS: Windows
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ HKCU\software\microsoft\windows\currentversion\run\ewgiops\ HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\ HKLM\software\microsoft\windows\currentversion\runservices\cksys\
Infection: sstup.eps, eclipse2000.exe
Eclypse
Aliases: Del_Armgo, Backdoor.Eclipse.a, Backdoor.Eclypse
Port: 3791
Author: Del_Armg0 of Magic Software
Created: JUL 1999
OS: Windows
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ HKLM\software\microsoft\windows\currentversion\run\rnaapp\
Infection: EclYpse1.exe
Ecoly
Created: NOV 2000
OS: Windows
Location: TBD
Ecrack
Created: MAY 2000
OS: Windows
Location: TBD
eDonkey Crack
Aliases: Backdoor.VB.fk
Port: 7377
Size: 131kb
Created: DEC 2001
OS: Windows
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Infection: svchost32.exe
EES Gateway
Aliases: Trojan-Proxy.Win32.Agent.bh, Backdoor.Win32.Agent.ig
Variants: 1.0, 1.1, 1.2, 1.3b
Port: 4545
Size: 82kb
Author: RaGe
Created: AUG 2004
OS: Windows
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\
Infection: blah.exe
EEYE
Aliases: Backdoor.Win32.EEYEv, Backdoor.Win32.EEYE.a, Backdoor.Win32.EEYE.b
Port: 113
Size: 10kb
Created: DEC 2000
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Infection: windows.exe, win32help.pif, hh.pif
EGO
Aliases: Backdoor.Win32.Ego
Variants: (a), (b)
Port: 2211, 2288
Size: 144kb
Author: Del_Armg0
Created: TBD
OS: Windows
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Infection: kernel64_dll.exe
Ego Shell
Aliases: Backdoor.Win32.Agent.ny
Size: 27kb
Author: EgoCrew
Created: SEP 2005
OS: Windows
Location: TBD
EgyLoader
Variants: 1.0, 1.1
Size: 49kb
Author: Rageh
Created: TBD
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Infection: sys32load.exe
Ehks
Aliases: Trojan.Spy.Delf.d, Trojan.Spy.Ehks.20, Trojan.Spy.Ehks.21, Backdoor.Win32.Ehks.22
Variants: 2.0 Beta, 2.0, 2.1, 2.2
Port: 80
Size: 177kb
Author: expl0it_shad0w
Created: SEP 2002
OS: Windows
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Infection: ymupdater.exe, ehks2.htm, evlog.dat, smsg.html, spooi32.exe, evo_12_11_22_11-20.html, index.html, netbi0s.exe
EICAR
Created: JAN 2000
OS: Windows
Location: TBD
Eingersperrt
Created: FEB 2001
OS: Windows
Location: TBD
Einsperren
Created: FEB 2001
OS: Windows
Location: TBD
EJ
Created: JUN 2003
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
El Diablo III
Aliases: Backdoor.VB.pk
Port: 1313, 1314, 1315, 1316
Size: 61kb
Author: Mistareal Network
Created: APR 2004
OS: Windows
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\
El Gran Hermano
Aliases: Backdoor.Win32.VB.gen
Port: 21993
Size: 78kb
Author: jordifreek
Created: AUG 2004
OS: Windows
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Infection: sistem.exe
El Jefe
Created: MAY 2002
OS: Windows
Location: TBD
Elefant
Aliases: Backdoor.Win32.Elefant
Port: 45455
Size: 430kb
Created: TBD
OS: Windows
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Infection: rundll16.exe, netstat32.exe
Elephant
Created: NOV 2002
OS: Windows
Location: TBD
Elf
Created: DEC 2001
OS: Windows
Location: TBD
Elfnet
Aliases: Backdoor.Win32.Elfnet
Port: 1235
Created: TBD
OS: Windows
Location: TBD
Elgolf
Aliases: Trojan.Spy.Elgolf
Variants: 1.0 Beta
Size: 31kb
Author: GiChTy
Created: MAY 1998
OS: Windows
Location: TBD
Elim
Created: APR 2004
OS: Windows
Location: TBD
Elite KeyLogger
Aliases: Trojan-Spy.Win32.Keylogger.bp
Author: Blackh0le
Created: JUL 2004
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{NAL503-AB-B70-7-11d2-9CBD-0AH6- 9YJIL}\
Infection: regof1.dll, regof2.dll, msvchost.exe, regm64.dll, rmnl.dll, ssvchost.exe
Elite Spyz
Created: SEP 2002
OS: Windows
Location: TBD
Elkcro Orifice
Aliases: Backdoor.Delf.jp
Port: 14806
Size: 161kb
Author: aKcro
Created: NOV 2003
OS: Windows
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Infection: eohide.exe
ELogList
Created:
OS: Windows
Location: TBD
Elza
Created: FEB 2005
OS: Windows
Location: TBD
Email PI Unlimited
Created: OCT 2002
OS: Windows
Location: TBD
EMCO
Created: OCT 2003
OS: Windows
Location: TBD
Emperor Clicker
Aliases: Backdoor.Win32.VB.jz
Author: HaCkErB0Y
Created: MAR 2003
OS: Windows
Location: TBD
Enable Regedit
Created: OCT 2000
OS: Windows
Location: TBD
Enculator
Created: AUG 1999
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
EndOfDays
Created: JAN 2000
OS: Windows
Location: TBD
English
Created: SEP 2003
OS: Windows
Location: TBD
Enmasse
Created: MAR 1998
OS: Windows
Location: TBD
Enterprise
Created: FEB 2000
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
EPAN
Created: AUG 1999
OS: Windows
Location: TBD
Epithalium
Aliases: Backdoor.Win32.CMDer
Variants: 2.1
Size: 7kb
Author: Icingtaupe
Created: OCT 2005
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Infection: msconfig.exe
EPS
Created: JAN 1999
OS: Windows
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
HKCU\Software\Mirabilis\ICQ\Agent\Apps\Run\
HKCU\Software\Mirabilis\ICQ\Owners\
Equilibrium
Aliases: Backdoor.Win32.Delf.mw, DoS.Win32.SynFlood.13, Flooder.Win32.Syn
Variants: 1.0
Author: matiteman
Created: AUG 2003
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Infection: ath.exe, balyoz.exe, bc.vxd, bomba.exe, bonk.exe, jolt2.exe, kod.exe, layer.exe, sin.exe, smurf.exe, suf.exe, syn.exe
Erase1Asm
Created: JUL 1998
OS: Windows
Location: TBD
Eraser
Aliases: Backdoor.Win32.VB.ti
Port: 871
Author: Splinter
Created: MAY 2004
OS: Windows
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Infection: mswinsock.ocx, root.exe
Erazer
Aliases: Backdoor.Win32.Agent.bz, Backdoor.Win32.Delf.qz, Backdoor.Win32.Agent.cu, Backdoor.Win32.Delf.vn, Backdoor.Win32.Delf.zg
Variants: 1.0, 1.1, Lite 0.1, Lite 0.2, Lite 0.3, Lite 0.4
Port: 80, 10426, 56185
Size: 14kb
Author: (v)aster
Created: AUG 2004
OS: Windows
Location: HKCU\Software\EZ
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Infection: msgnet32.exe, msiecfg.exe
Ereet
Aliases: Backdoor.Win32.Eret.10, Backdoor.Win32.Eret.20.b, Backdoor.Win32.Eret.2102, Backdoor.Win32.Teer, Backdoor.Win32.Eret.2115
Variants: 1.0, 2.0 (b), 2.102, 2.1.06, 2.115
Size: 11kb
Created: MAY 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\
Eret
Created: JUN 2001
OS: Windows
Location: TBD
Eric
Created: AUG 1996
OS: Windows
Location: TBD
Erkle
Created: MAR 1992
OS: Windows
Location: TBD
ERRB
Created: APR 2004
OS: Windows
Location: TBD
Erro
Created: MAY 1997
OS: Windows
Location: TBD
ErrOr32
Created: JAN 2000
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
HKU\.Default\Software\Mirabilis\ICQ\Agent\Apps\
HKCU\Software\Mirabilis\ICQ\Agent\Apps\
ESK
Aliases: “Eter’s Simply Keylogger”, Trojan- Spy.Win32.KeyLogger.eh
Port: 6000
Size: 176kb
Author: Eter
Created: OCT 2004
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Infection: svchost32.exe
Espionage
Created: JAN 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Ess
Created: APR 1997
OS: Windows
Location: TBD
EuEx
Aliases: Backdoor.Win32.Delf.hw
Author: Enzo-Eghe
Created: DEC 2003
OS: Windows
Location: TBD
Eurosol
Created: JUL 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Evade
Aliases: Backdoor.Win32.VB.wm
Variants: 1.0, 1.1 (b), 1.12, 1.13
Port: 9999
Size: 12kb
Author: FeraliX
Created: AUG 2004
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Infection: winservice.exe, winhost.exe
Evangelion Mini
Aliases: Backdoor.Win32.Zaratustra
Port: 660
Author: napa_topos
Created: APR 2002
OS: Windows
Location: TBD
Evasive Keylog
Variants: 3.2.6
Port: 143, 6213
Size: 190kb
Created: NOV 2002
OS: Windows
Location: TBD
Event Horizon
Created: SEP 2001
OS: Windows
Location: TBD
EventLog
Created: JAN 2003
OS: Windows
Location: TBD
Evil 98
Created: SEP 1999
OS: Windows
Location: TBD
Evil FTP
Created: DEC 1997
OS: Windows
Location: TBD
Evil Goar
Created: JUN 2000
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Evil Net
Aliases: Backdoor.Win32.Evit.a
Port: 200
Size: 204kb
Author: whispering
Created: JUN 2004
OS: Windows
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Evil Shell Backdoor
Size: 30kb
Author: Lympex
Created: NOV 2005
OS: Windows
Location: TBD
Evil X
Created: APR 2003
OS: Windows
Location: TBD
evil-vnc
Aliases: Backdoor.Evncil, Backdoor.NetDevil.10.Logger
Port: 5800, 5900
Author: matiteman
Created: APR 2004
OS: Windows
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\
Infection: iexplore.exe, iexplorer.exe, othread2.dll, stealth.dll, vnchooks.dll
Evil-X
Created: MAR 2003
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
EvilBot
Aliases: Backdoor.Win32.Evilbot.a
Size: 16kb
Author: JusSx
Created: MAR 2001
OS: Windows
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Infection: newname.exe
EvilSocks
Created: SEP 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Evolution
Created: JAN 2002
OS: Windows
Location: TBD
Evulz.785.a
Created: AUG 2000
OS: Windows
Location: TBD
Examehell
Created: FEB 2005
OS: Windows
Location: TBD
Example
Aliases: Backdoor.Example
Port: 715
Size: 386kb
Created: TBD
OS: Windows
Location: TBD
Excalibur
Created: APR 1999
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
Exception
Aliases: Backdoor.Win32.Small.z
Variants: 1.0
Port: 38856
Size: 12kb
Author: MrJinxy
Created: MAY 2004
OS: Windows
Location: TBD
Infection: exception.exe
Exception Manager
Created: MAY 1999
OS: Windows
Location: TBD
Excessive Force
Created: JUL 2001
OS: Windows
Location: TBD
EXE Blocker
Created: JUN 2000
OS: Windows
Location: TBD
Exec Demo 2
Created: SEP 1999
OS: Windows
Location: TBD
ExecTCP
Created: DEC 2002
OS: Windows
Location: TBD
ExecuteChanger
Created: MAY 2004
OS: Windows
Location: TBD
Executer Controller
Aliases: Backdoor.Win32.Excecutor.a, Backdoor.Win32.Excecutor.b
Variants: (a), (b)
Port: 80
Size: 226kb
Author: Lavar
Created: TBD
OS: Windows
Location: TBD
Executor
Created: MAY 1998
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
ExeHeader.Funked
Created: OCT 1994
OS: Windows
Location: TBD
ExeScan
Created: MAR 2000
OS: Windows
Location: TBD
Existenz
Created: FEB 2002
OS: Windows
Location: TBD
Exit Win Predator
Created: NOV 2000
OS: Windows
Location: TBD
Expir
Created: MAR 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
ExpIorer
Aliases: Backdoor.Win32.ExpIore
Port: 113
Size: 19kb
Created: TBD
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
Infection: expiorer.exe
Exploder
Created: NOV 2002
OS: Windows
Location: TBD
Exploder 1.b.3
Aliases: ActiveX/Exploder, AX/Exploder, Trojan.ActiveX.Exploder
Author: Fred McLain
Created: FEB 2000
OS: Windows
Location: TBD
Infection: exploder.ocx, the exploder control frequently asked questions (faq).htm
Exploiter
Created: AUG 2000
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Explorer
Created: FEB 2005
OS: Windows
Location: TBD
Explorer Remoto
Aliases: Backdoor.ExplorerRemoto.a
Port: 8000, 8001, 8086, 8087
Size: 45kb
Author: TheJack
Created: JUL 2004
OS: Windows
Location: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Infection: server para bajar archivos.exe
Express
Created: JAN 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
ExStar
Created: MAR 2004
OS: Windows
Location: TBD
Exterminator
Created: MAY 2000
OS: Windows
Location: TBD
External
Created: MAY 2004
OS: Windows
Location: TBD
Extusr
Created: AUG 1998
OS: Windows
Location: TBD
Eye Spy
Aliases: Trojan-Spy.Win32.VB.dd
Port: 907
Author: Splinter
Created: SEP 2004
OS: Windows
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Infection: msnmsgr.exe, updates.exe
EZ Killa
Created: OCT 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
F (124)
F You AVP
Created: MAY 1999
OS: Windows
Location: TBD
F-Backdoor
Created: DEC 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
F0replay
Created: APR 1999
OS: Windows
Location: TBD
Faceless Sin
Created: FEB 2003
OS: Windows
Location: TBD
Fade
Created: MAR 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Fake
Created: MAY 2002
OS: Windows
Location: DNR
Fake Back Orifice
Created: JAN 1999
OS: Windows
Location: TBD
Fake FreeAV
Created: JAN 2000
OS: Windows
Location: DNR
Fake FTP
Created: DEC 1999
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
Fake NetStat
Created: NOV 2001
OS: Windows
Location: TBD
Fake Scanner
Created: NOV 2002
OS: Windows
Location: TBD
Fake Server
Created: AUG 2003
OS: Windows
Location: TBD
Fake TelNet
Created: DEC 2002
OS: Windows
Location: TBD
Fake Yahoo! Messenger
Aliases: Trojan.Win32.Fakeyah.a
Size: 94kb
Author: assassin007
Created: NOV 2002
OS: Windows
Location: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
Infection: Ypager.exe
Fakeb
Created: DEC 1998
OS: Windows
Location: TBD
FakeSurf
Created: MAR 2005
OS: Windows
Location: TBD
Falling Door
Created: OCT 2002
OS: Windows
Location: TBD
Falling Star
Created: OCT 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
HKCR\exefile\shell\open\command\
HKCR\txtfile\shell\open\command\
Fancy
Created: JAN 2001
OS: Windows
Location: TBD
Fanop Family
Aliases: Win32/Fanop Family
Created: JAN 2006
OS: Windows
Location: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\msctl32.dll\ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\msctl32.dll\DllName\ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\msctl32.dll\Startup\ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\msctl32.dll\Asynchronous\ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\msctl32.dll\Impersonate\ HKLM\System\CurrentControlSet\Services\i386p\ HKLM\System\CurrentControlSet\Services\i386p\Type\ HKLM\System\CurrentControlSet\Services\i386p\Start\ HKLM\System\CurrentControlSet\Services\i386p\ErrorControl\ HKLM\System\CurrentControlSet\Services\i386p\ImagePath\ HKLM\System\CurrentControlSet\Services\i386p\DisplayName\
Infection: msctl32.dll, winlogon.exe, i386p.sys
Farenheit 121
Created: NOV 2002
OS: Windows
Location: TBD
FarFrom
Created: FEB 1996
OS: Windows
Location: TBD
Farnaz
Created: MAR 2002
OS: Windows
Location: DNR
FastCGC
Created: AUG 1997
OS: Windows
Location: TBD
Fatal Connections
Created: FEB 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
FAV
Created: MAR 2001
OS: Windows
Location: TBD
FBI
Created: FEB 2004
OS: Windows
Location: TBD
FBSD RootKit
Created: APR 1997
OS: Windows
Location: TBD
FD
Created: JUN 1996
OS: Windows
Location: TBD
Fear
Created: MAY 2003
OS: Windows
Location: DNR
Fear & Hope
Created: MAR 2003
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Fearless Lite
Created: NOV 2003
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
FearMail
Created: MAR 2000
OS: Windows
Location: TBD
Fenster
Created: JUN 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
FeRAT
Created: MAY 2003
OS: Windows
Location: TBD
Feri
Created: OCT 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Fermif BIA
Created: FEB 1996
OS: Windows
Location: TBD
Feuer
Created: APR 2002
OS: Windows
Location: TBD
Feuerleiter
Created: MAR 2002
OS: Windows
Location: TBD
FI7
Created: DEC 2001
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
Fichv
Created: OCT 1995
OS: Windows
Location: TBD
Fictional Daemon
Created: DEC 2002
OS: Windows
Location: TBD
Fiendish Person
Created: MAY 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Fifteen
Created: MAR 1998
OS: Windows
Location: TBD
Fight
Created: MAR 2004
OS: Windows
Location: TBD
File Backup
Created: JUL 2000
OS: Windows
Location: TBD
Infection: fileba~1.cab
File Exchange
Created: SEP 2000
OS: Windows
Location: TBD
File Hide
Created: DEC 1992
OS: Windows
Location: TBD
File Manager
Created: TBD
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
File Nail
Created: MAY 1999
OS: Windows
Location: DNR
File Protector
Created: DEC 1999
OS: Windows
Location: TBD
FileHack
Created: JUN 2003
OS: Windows
Location: TBD
FileVector.Class
Created: APR 1997
OS: Windows
Location: TBD
Find 126
Created: OCT 2001
OS: Windows
Location: TBD
FindDomains
Created: APR 1996
OS: Windows
Location: TBD
FireBall
Created: OCT 1999
OS: Windows
Location: TBD
FireCracker
Created: MAR 2001
OS: Windows
Location: TBD
FireFox Scan
Created: MAR 2000
OS: Windows
Location: TBD
FireHand Ember Millennium
Created: SEP 2002
OS: Windows
Location: TBD
Firehotcker
Created: JUL 1999
OS: Windows
Location: DNR
FireNet
Created: OCT 2003
OS: Windows
Location: TBD
First
Created: SEP 2003
OS: Windows
Location: TBD
FirstBorn
Created: MAR 1998
OS: Windows
Location: TBD
Fish
Created: SEP 2001
OS: Windows
Location: TBD
FixIt
Created: APR 2001
OS: Windows
Location: TBD
FlashPlayer
Created: SEP 2001
OS: Windows
Location: TBD
Flask MPEG
Created: JAN 2001
OS: Windows
Location: TBD
FliMod
Created: AUG 2000
OS: Windows
Location: TBD
FloodNet
Created: OCT 2002
OS: Windows
Location: TBD
Fluff2 Rabarbar
Created: AUG 2001
OS: Windows
Location: TBD
Fluxay
Created: APR 2001
OS: Windows
Location: TBD
FMSZ
Created: FEB 2004
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
FOG.AirRaid
Created: APR 2004
OS: Windows
Location: TBD
Foil
Created: AUG 1996
OS: Windows
Location: TBD
Fonly
Created: MAR 2002
OS: Windows
Location: TBD
Force
Created: JUL 2002
OS: Windows
Location: TBD
Forced Entry
Created: SEP 1998
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
ForcedControl
Created: OCT 2003
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Fore
Created: MAR 1999
OS: Windows
Location: TBD
Format CQ
Created: DEC 2000
OS: Windows
Location: TBD
Format Kill
Created: APR 1999
OS: Windows
Location: TBD
Formats
Created: APR 1999
OS: Windows
Location: TBD
Fosen
Created: SEP 2001
OS: Windows
Location: TBD
Foto Red Spy
Created: APR 2003
OS: Windows
Location: TBD
Fox Q
Created: JUL 2002
OS: Windows
Location: TBD
FoxEyes
Created: JUL 2000
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
FPing
Created: JUL 1993
OS: Windows
Location: TBD
FR
Created: JUL 1999
OS: Windows
Location: TBD
FR Lite
Created: DEC 2000
OS: Windows
Location: TBD
Fraggle Rock
Created: FEB 2001
OS: Windows
Location: TBD
Fragment
Created: FEB 1996
OS: Windows
Location: TBD
Frapes
Created: MAR 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Frase
Created: APR 1999
OS: Windows
Location: TBD
Freak2k
Created: APR 2000
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
Freaker
Created: MAR 2004
OS: Windows
Location: TBD
Freddy K
Created: OCT 2000
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
FrediSoft
Created: SEP 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
FreeGatez
Created: SEP 2003
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
FreeGatez Lite
Created: SEP 2003
OS: Windows
Location: TBD
Free JC Suite
Created: JUN 1999
OS: Windows
Location: TBD
Frenzy
Created: MAR 1999
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Frodo
Created: MAR 2001
OS: Windows
Location: TBD
Froggie
Created: FEB 2004
OS: Windows
Location: TBD
FSH
Created: OCT 1990
OS: Windows
Location: TBD
FSP Scan
Created: MAY 1994
OS: Windows
Location: TBD
FTBC
Created: FEB 1995
OS: Windows
Location: TBD
FTP
Created: MAY 2004
OS: Windows
Location: TBD
FTP99
Created: MAY 1999
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
FTP99CMP
Created: MAY 1999
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
FTP SSSrv
Created: JUN 2002
OS: Windows
Location: TBD
FTPList
Created: MAR 1998
OS: Windows
Location: TBD
Fuck
Created: APR 2004
OS: Windows
Location: TBD
Fuck Lamers Backdoor
Created: MAY 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Fuck Mzn
Created: AUG 2002
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Fuckd00r
Created: AUG 2002
OS: Windows
Location: TBD
Fun
Created: FEB 1996
OS: Windows
Location: TBD
Fun Factory
Created: SEP 2002
OS: Windows
Location: TBD
FunGame
Created: FEB 2001
OS: Windows
Location: TBD
Funny
Created: NOV 1999
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Fusion
Created: MAY 2004
OS: Windows
Location: TBD
FUTS
Created: DEC 2000
OS: Windows
Location: TBD
FX
Created: FEB 2003
OS: Windows
Location: TBD
FY.417
Created: MAR 1998
OS: Windows
Location: TBD
FYEO
Created: DEC 1999
OS: Windows
Location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run\



