| Port No | 6776 |
| Service Name | 2000 Cracks |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | 2000 Cracks is a simple FTP server. It loads a closew.bat with windows. It does however make a backup of the win.ini file and saves it as win.ori. |
| Reference Link | 2000 Cracks Trojan |
| Attack | It autoloads the Registry: Win.ini: Key: load=closew Under: [windows] It does the following : 1.FTP server Removal : 1.Remove the closew.bat key in the win.ini under [boot]. That can be done with text editing program. 2. Reboot the computer or the trojan 3. Delete the trojan files AJOUT.INI, closew.bat and Instll.bat in the windows directory. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.