FANDOM



Duksten is a destructive worm on Microsoft Windows 9x. It pretends to be a debugger for the Bugbear virus.

Payload

When the file is loaded, it comes up with a message pretending to be a debugger. The app crashes when the message box is closed. It adds a "m_regedit.exe" file to the WINDOWS folder, which it will try to run when the real "regedit.exe" is run from Run. The worm adds itself to the registry to activate when the computer starts up.

Whenever an infected file is run in 2003, the computer reboots. Whenever the desktop is loaded, the worm runs and reboots the system. To recover the system, the user must reboot to Safe Mode and delete the registry entries and files.

Videos

Email-Worm.Win32

Email-Worm.Win32.Duksten

Duksten Worm by Danooct1