Re: New Trojan on the block [CIA Trojan]

Hello Roland,

As far as CIA goes thats what the group who coded it is calling it [not
refering to the government agency] as taken from the readme file CIA 1.23 PB
1 ( Public Beta 1 ) and yes the "Features" from the readme is just some
things the trojan can do, there is a long list and some things not even
mentioned in the readme file for this trojan. As for the CIA name part I
don't know what the A is but the CI stands for Cruel-Intentionz. This trojan
can also open a SOCKS v4 proxy on the infected machine and as usal comes
with a keylogger, webcam capture and screen capture but what caught my eye
was streaming audio although all my tests to get it to work resulted in
errors. There are a lot of other things this trojan can do but they range
from opening your cd-rom to locking windows where they can't be opened to
shutting down your computer.

-------------------------------------------------------------
Chris Norton - UAT Student Software Engineering Network Defense

----- Original Message ----- 
From: "RolandGreen" <[email protected]>
To: <[email protected]>
Sent: Sunday, August 29, 2004 10:07 AM
Subject: Re: [Intrusions] New Trojan on the block [CIA Trojan]


> Hello Chris,
>
>     I was just wondering why you thought this was a CIA Trojan?  In
> addition what do the items listed under "["Features" taken from the
> readme]"?  Are you listing all the things that this new Trojan can do.
>
> The R.
_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions