00[Sub]7

Overview

Vendor Description

From the doc: '00[Sub]7 - The Ultimate SubSeven Logging Tool. Fake Subseven on port 27374 (standard port),
Compatible with Subseven Bonus and all versions before (and Win95/98)*, like windows- Toolbar which auto hides to the top, Looks (graphical) the same as Subseven itself, Checks every 30 seconds if you have made a TCP/IP connection, if you did it starts listening, You will see exactly what the client does/asks for (every button click will be shown to you and 00[Sub]7 will auto-send the right answer to the client, so it suspects nothing, Fake a Filesystem, so the client thinks he rules over your hard-disk files! Chat to the client, without their request!!! (Client to Client) When the client wants to chat with the Victim (you), a Chat-Screen pops up and your ready for a nice chat! You can close it at all times [hehehehe...] Same as above with the Client-2-Client chat! Send a hackers warning containing clients IP, current port, and that he's logged, Dissconnect the client whenever you want, Send really big strings (letters and numbers) to client, to (try) nuke his Internet connection...'

Category

Trojan: Any program with a hidden intent. Trojans are one of the leading causes of breaking into machines. If you pull down a program from a chat room, new group, or even from unsolicited e-mail, then the program is likely trojaned with some subversive purpose. The word Trojan can be used as a verb: To trojan a program is to add subversive functionality to an existing program. For example, a trojaned login program might be programmed to accept a certain password for any user's account that the hacker can use to log back into the system at any time. Rootkits often contain a suite of such trojaned programs.

Origins

Author

Jeff

Date of Origin

July, 2000

Detection and Removal

Manual Removal

Follow these steps to remove 00[Sub]7 from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.

Clean Registry:

Remove these registry items (if present) with RegEdit:

Remove Files:

Remove these files (if present) with Windows Explorer:

.97mm3.22 007SSInstall 007SpySoftware 007Starr 00Fun.com 00[Sub]7 00dDialer 07h1n 100hot 1024-SBC