What happened to the Messenger Plus! forums on msghelp.net?
Shoutbox » MsgHelp Archive » Skype & Technology » Tech Talk » Backdoor.ducy

Backdoor.ducy
Author: Message:
Vantage
Full Member
***

Avatar
Bam

Posts: 374
Reputation: -1
– / Male / –
Joined: Jul 2003
O.P. Backdoor.ducy
Mess.be says:
Backdoor.Ducy is a backdoor Trojan horse that uses MSN Messenger to give an attacker access to your computer.

The latest instant-messaging virus was detected last week and can infect an individual's computer from a Website or an e-mail attachment.

"Backdoor.Ducy is being used . . . for command and control," said Vincent Weafer, senior director of development for Symantec Security Response. "Once it's there, [users are] basically using instant messaging as a means to send command-and-control capabilities to an attacker." [Source: New York Post]

What does Ducy do?

1) It creates the file, %Windir%\Msn.exe.

2) Adds the value:

"control"="%Windir%\msn.exe " to the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

so that the Trojan runs when you start Windows.

3) Opens a backdoor on the infected system, allowing an attacker to connect to the system using MSN Messenger.


Watch out for this Virus
read more about it Here
Never Hope. Always Wish.
06-13-2004 10:43 PM
Profile E-Mail PM Find Quote Report
« Next Oldest Return to Top Next Newest »

Messages In This Thread
Backdoor.ducy - by Vantage on 06-13-2004 at 10:43 PM


Threaded Mode | Linear Mode
View a Printable Version
Send this Thread to a Friend
Subscribe | Add to Favorites
Rate This Thread:

Forum Jump:

Forum Rules:
You cannot post new threads
You cannot post replies
You cannot post attachments
You can edit your posts
HTML is Off
myCode is On
Smilies are On
[img] Code is On