Updated: February 13, 2007 11:42:29 AM
Type: Hack Tool
Risk Impact: High
File Names: vanquish.exe
vanquish.dll
Systems Affected: Windows 2000, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP
When Hacktool.Vanquish runs, it does the following:
- Creates the mutex "VRTLogMutex".
- Adds itself as the following service:
Service Name: Vanquish
Service Display Name: Vanquish Autoloader v0.1 beta10
- Injects vanquish.dll into all processes.
Note: The hacktool will not inject the module into processes whose files are hidden, nor does it create and use its own hidden folder.
- Hides all files and folders that have the string "vanquish" in their name.
- Creates the file C:\vanquish.log.