Services    Trojan info    Chat    Downloads      About Us      Contact  Us     Help Forum     Support Us    Search

Dial up ripper
Dial up ripper is a small single use trojan , which means that it only works once and when windows is restarted it doesn't work again.

Dial up ripper is used to steal peoples  dial up account information it logs this info and then sends it to the hacker who is running the client program .

Dial up accounts are pretty valuable to hackers because it lets them log on to the internet using someone else's account giving them a misleading identity , a shield they can hack behind and not be found .

If you suspect someone has sent this trojan to you then you must immediately shut down windows, this will disable the trojan . If you think someone has got your dial up account details then you must contact your ISP by phone preferably and change these details , this applies for other trojans as well not just dial up ripper because a lot of trojans do have the ability to read cached passwords .

Deepthroat
Deepthroat is one of the more advanced trojans , and many trojans have based there features on deepthroat . It was also , to my knowledge , the first trojan to have icq notify  ability , where the victims pc sends a wwpager message to the hackers icq number with needed details like ip etc so the hacker can hack the victim every time the victim goes online .

This trojan adds a registry line not only when its run, but when its shutdown.
Version 1 used the name System32, and version 2 and 3 uses the name SystemTray.
This key will be located in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
For version 1, look for the item 'System32', which should point to the file c:\windows\system32.exe
Version 2 or 3 will be listed under the item 'Systemtray', and should point to c:\windows\systray.exe
(Note: If you have an item 'SystemTray' = 'Systray.exe' with no path, then this points to C:\windows\system\ and is OK. Only copies residing in C:\windows are potentially dangerous.)
Be careful in that c:\windows\system\systray.exe is a real system program, and should NOT be deleted.
First note the program/version it points to.. you will need to delete it later.
Next, go to start and shutdown.. Restart the computer in MSDos mode.
You should have a C:\windows prompt .. if not cd c:\windows to get to the right directory, and then delete the exe you found and noted using regedit. (del filename.exe)
Then type Exit to get back to windows, and then reboot your system.
After the reboot, go back to regedit and remove the registry entry. There is no need to reboot again, as the trojan was deleted.