DSK WebDownloader 1.0

· Overview ·
· Origins ·
· Operation ·
· Detection and Removal ·
· Research ·

Overview

Vendor Notes:

 from the doc:
DSK Webdl 1.0 by Psyphen
DSK Webdl is a sleek, stealthy, and tiny Web Downloader. DSK Webdl was coded in all ASM. This mean's it's fast, and small (the perfect combo). THANKS TO APHEX FOR HIS METHOD OF MAKING THE WEBDL UNDETECTED (WHICH I USED)!!!
Server size: 1.5k
Server size w/ FSG: 1.08k
Server size w/ UPX: Unpackable (1.5k)
NOTE: FSG comes with DSK Webdl
How to use
- Open editserver.exe
- In the 'Download From' textbox, type in the url to the file that you wan't downloaded.
- In the 'Download To' textbox, type in the path to which you want the downloaded file to be located.
- After that, just click 'Generate Server', and your server will be generated as 'server.exe' in the folder that the editserver is in.
- Once the server is opened, the file you specified in the editserver before will be downloaded, and executed silently.
- THAT'S IT! Enjoy!
GREETZ TO: Aphex for the technique Drocon for the editserver and support Dread^n0ught, Drocon, and r3L4x for beta testing
Psyphen

Alias:

 DSK Webdl 1.0, Trojan Horse [Panda], TrojanDownloader.Win32.Small.aj [Kaspersky]

Category:

Downloader: A program designed to retrieve and install additional files, when run. Most will be configured to retrieve from a designated web or FTP site.

Trojan: Any program with a hidden intent. Trojans are one of the leading causes of breaking into machines. If you pull down a program from a chat room, new group, or even from unsolicited e-mail, then the program is likely trojaned with some subversive purpose. The word Trojan can be used as a verb: To trojan a program is to add subversive functionality to an existing program. For example, a trojaned login program might be programmed to accept a certain password for any user's account that the hacker can use to log back into the system at any time. Rootkits often contain a suite of such trojaned programs.

Similar Pests:

 Downloader · Trojan

Origins

Author:

 Psyphen

URL:

 http://dcc.darksideofkalez.com/

Date of Origin:

 August, 2003

Operation

Storage Required:
  • DSK WebDownloader 1.0: at least 21 KB
    		•

    ScreenShot:


    DSK WebDownloader 1.0

    Detection and Removal

    Automatic Removal:

    PestPatrol detects this.

    PestPatrol removes this.

    Manual Removal:

    		 Follow these steps to remove DSK WebDownloader 1.0 from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.
    Stop Running Processes:

    Kill these running processes with Task Manager:

    Remove Files:

    Remove these files (if present) with Windows Explorer:

    Research

    File Analyses:

    More Info:
  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
    		•

    Research By:
  • PestPatrol's Pest Research Center
    		•

    Last Revised:

    		 February 28, 2005