Home Malware Programs Trojans Floodblack

Floodblack

Posted: March 28, 2006

Floodblack is a trojan that gives the attacker remote unauthorized control over an infected PC. It runs on every Windows startup and remains hidden in background. Floodblack contacts predefined web server to receive commands from the hacker. These commands allows to execute any local application, modify the computer, attack remote PCs or show annoying messages. Floodblack can severely damage the computer, violate user privacy, decrease overall computer performance and Internet connection speed. It depends on msping.exe executable, which usually can be found in the default computer directory .

File System Modifications

  • The following files were created in the system:
    # File Name
    1 msping.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunmsping=%system%msping.exe
Loading...