Network Associates: W32/Trinoo

"Characteristics
This is a 32bit Intel-based version of a previously published as source code Denial of Service (DDoS) attack program. This compilation of the trojan when run on a system, will load from the registry at this key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ Run=service.exe

This file will run as a service at Windows startup, listening for commands on a pre-designated UDP port."

Complete Story

Related Stories:

• CNET News.com: Hacker discloses new Internet attack software(Feb 15, 2000)
• Security Portal: Denial of Service (DoS) FAQ(Feb 14, 2000)
• LWN: DDOS Attack Mitigation(Feb 12, 2000)
• The Register: FBI refuses to open source for Linux DDOS detector(Feb 12, 2000)
• Security Portal: SANS Flash Alert: the Hunt For Solaris Trojans(Jan 05, 2000)