| Port No | 121 |
| Service Name | God Message |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | Works on Windows 95, 98, ME, NT and 2000, together with MS Internet Explorer 5, MS Outlook and mIRC. The password for The Thing server = pass. |
| Reference Link | God Message Trojan |
| Attack | It autoloads the Registry: HLM\Software\Microsoft\Windows\CurrentVersion\Run\ HCU\Software\Microsoft\Windows\CurrentVersion\Run\ It does the following : 1. Remote Access 2. ActiveX trojan 3. Downloading trojan 4. Worm 5. Mail trojan 6. IRC trojan 7.Virus 8. Network trojan By just viewing a HTML file or reading a mail a trojan can be downloaded to the users computer. As of now it installs The Thing 1.6 server. Spreads through MS Outlook, shared drives and IRC. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.