| Name: | Duload |
| Aliases: | Worm.P2P.Duload, W32/Duload.worm, Yoof, W32.HLLW.Yoof, |
| Ports: | |
| Files: | Systemconfig.exe - Uninstall.exe - Unwise.exe - Alicia silverstone payboy nude.exe - Bingo.exe - Britney spears dance beat.exe - DDos Client.exe Email Bomber.exe FileServer.exe Flash Golf.exe Free Mpegs.exe Free Pics.exe Free Porn.exe Hoes For You Solitare.exe Hotmail Hacker.exe Irc Client.exe J.Lo Bikini Screensaver.exe Jenna Jamison Dildo Humping.exe Kama Sutra Tetris.exe Kazaa Clone.exe Mirc 7.0.exe Napster Clone.exe Pamela Anderson And Tommy Lee Home Video.exe Play Games Online For FREE.exe Ps2 Emulator.exe Ps2 Iso 2 Rom Converter.exe Shakira Dancing.exe Soldier Of Fortune 2 Mutiplayer Serial Hack.exe System Monitor.exe The Sims Game Crack.exe Universal Game Crack.exe Warcraft 3 Battle.net Crack.exe Website Hacker.exe Win A Ps2.exe Win An Xbox.exe Winace.exe Windows Hacker.exe Winmx.exe Winrar.exe Winzip.exe Working Iso Burner.exe Xbox Emulator.exe Xbox Iso 2 Rom Converter.exe - 7,680 bytes (UPX compressed) - 18,432 bytes (uncompressed) |
| Created: | Aug 2002 |
| Requires: | |
| Actions: | Worm / Kazaa trojan / Downloading trojan |
| Registers: | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\ | |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ | |
| HKEY_CURRENT_USER\Software\Kazaa\LocalContent | |
| HKEY_CURRENT_USER\Software\Kazaa\Transfer | |
| HKEY_LOCAL_MACHINE\Software\Kazaa\Cloudload | |
| Notes: | Works on Windows 95, 98, ME, NT, 2000 and XP, together with Kazaa P2P networks. |
| Country: | |
| Program: | Written in Visual Basic 6.0. |
