Home Malware Programs Remote Administration Tools DaoDan

DaoDan

Posted: March 28, 2006

This RAT was created by a Chinese author called Lovejingtao. It is
written in Visual C++ and compressed wwith ASPack. Several variants
appeared from May 2000 to March 2002. The interface is written in
Chinese. The principle of such application is simple: the attacker infects
his victim via the e-mail or File and Print Sharing with a server
application. Once in the computer, the virus opens a default port TCP 25 and
awaits commands from the intruder. He can connect to the infected PC
via a client application.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 [system
    2 iplook.exe
    3 msvbvm60.dll
    4 readme.txt
    5 winrundll.exe
Loading...