BlackKiLLeR 1.1 (VirTool.Win32.VB.s)

Троян с функциями отключения антивирусов и персональных файрваллов, написанный на Visual Basic.


Троян может отключать работу следующих программ:

Agnitum Trojan Scanner
Anti Trojan Watch
AntiVir 9x
Anti-Viral Toolkit Pro (AVP)
AntiVirusKit 2004
AVAST
AVAST32 Anti Virus
AVG Anti Virus
AVPersonal
Bit Defender Professional
Bull Guard
Dr. Solomon Virus Scan
Dr. Solomon Virus Scan
E-Scan
E-Trust Anti Virus
EZ Anti Virus
Fix-it
F-PROT
F-Secure Anti Virus
G-Data AntiVirenKit
H+BDEV Anti Virus
InoculateIT Personal Edition
Iris Anti Virus
Kaspersky Anti Virus
McAfee Anti Virus
Module for Computer Associates VET Anti Virus
Moosoft's Trojan Cleaner
NOD32 Anti Virus
Norman Anti Virus
Norton Anti Virus 2003
Norton Anti Virus 2004
Norton Anti Virus 2005
Norton Anti Virus Corporate Edition
OfficeScanNT
Panda Anti Virus
PC-Cillin
RAV Anti Virus
Sophos Anti Virus
TDS-3 Trojan Defense Suite
Trojan First Aid Kit 5
Trojan Hunter
VET Anti Virus
Virus Buster
Bit Defender Professional
Blackice
E-Trust's Email Firewall Desktop Shield
EZ-Trust - E-Trust Firewall
F-Secure Firewall
Hacker Eliminator
Kaspersky Anti Hacker
Kerio Personal Firewall
McAfee Personal Firewall
Neowatch
Netutils Firewall
Norman Firewall
Norton Personal Firewall 2004
Norton Personal Firewall 2005
Outpost Pro's Firewall
Personal Firewall
PrivateFirewall Version 3.0
Sygate Personal Firewall
Tinyfirewall
Tinypersonal Firewall
WinROUTE Firewall
Zonealarm Firewall
ZoneAlarm Pro Firewall

Hewlett Packard OS Backup Tool
LAN Administrator Scan Tool
McAfee Privacy Service
Network Administrator Remote Administrator Tool
Norton Disk Doctor
Norton Protected Recycle Bin
Outlook Express Updater
PC Body Guard
Process Monitor
Program Auditor
PVIEW
Registry Cleaner
Roxio's GoBack Utility
SPYXX

Серверная часть состоит из одного файла c:\WINDOWS\Service32.exe
Размером 45,168 байт

Для автоматического запуска создается следующий ключ реестра:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Service32"
data: C:\WINDOWS\Service32.exe