Jaan.100
| Aliases: | Backdoor.Win32.Jaan.a , Backdoor.Win32.Jaan.b (Kaspersky) |
| Date added: | 2007-11-14 |
Details
This is a modification of backdoor Ajan. Kills services.exe and then drops 3 files into the Windows folder. One of them is services.exe 20kb, which is started on next reboot from the registry Run key.afire.dll 184kb - trojan DLL
afprj.dll 240kb - a copy of the trojan installer (actually an EXE file)