Constructor.Win32.Macaka

· Overview ·
· Origins ·
· Operation ·
· Detection and Removal ·
· Research ·

Overview

Vendor Notes:

 This is a very small (928 bytes) webdownloader.Once ran the server withdownload and execute a file of your choice. Server contains no startup keys so file will only be downloaded once. It's written in C++ so it's no need to install a VB-runtime or any other extra's. Atmaca Downloader was designed and tested under the following operation systems: Windows 95, 98, NT, 2000, XP. if you have any comments email me: atmaca@prohack.net In case you want the source code, please do not send any mail, is not available.

Alias:

 Atmaca Downloader version 2.0, Constructor/Macaka.A [Panda], Trj/Downloader.BZ [Panda], TrojanDownloader.Win32.Agent.bl [Kaspersky], Win32/TrojanDownloader.Small.FL trojan [Eset]

Category:

Virus Creation Tool: A program designed to generate viruses. Even early virus creation tools were able to generate hundreds or thousands of different, functioning viruses, which were initially undetectable by current scanners.

Downloader: A program designed to retrieve and install additional files, when run. Most will be configured to retrieve from a designated web or FTP site.

Trojan: Any program with a hidden intent. Trojans are one of the leading causes of breaking into machines. If you pull down a program from a chat room, new group, or even from unsolicited e-mail, then the program is likely trojaned with some subversive purpose. The word Trojan can be used as a verb: To trojan a program is to add subversive functionality to an existing program. For example, a trojaned login program might be programmed to accept a certain password for any user's account that the hacker can use to log back into the system at any time. Rootkits often contain a suite of such trojaned programs.

Trojan Creation Tool: A program designed to create Trojans. Some of these tools merely wrap existing Trojans, to make them harder to detect. Others add a trojan to an existing product (such as RegEdit.exe), making it a Dropper.

Similar Pests:

 Virus Creation Tool · Downloader · Trojan · Trojan Creation Tool

Origins

Author:

 ATmaCA

URL:

 http://www.atmacasoft.com http://www.prohack.net

Date of Origin:

 March, 2004

Operation

Storage Required:
  • Constructor.Win32.Macaka: at least 17 KB
    		•

    Detection and Removal

    Automatic Removal:

    PestPatrol detects this.

    PestPatrol removes this.

    Manual Removal:

    		 Follow these steps to remove Constructor.Win32.Macaka from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.
    Stop Running Processes:

    Kill these running processes with Task Manager:

    Remove Files:

    Remove these files (if present) with Windows Explorer:

    Research

    File Analyses:

    More Info:
  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
    		•

    Research By:
  • PestPatrol's Pest Research Center
    		•

    Last Revised:

    		 April 01, 2005