CMDGet 1.0

Overview

Vendor Description

from the doc: 'Features:
Only 1.12kb :) (fuck you and your 200kb filesize WGET)Alternative to TFTP to get files onto a comprimised server
Downloads a file from a website from user provided parameters
Directions:from the commandline/dos prompt/shelltype:
CMDGet
illwill

Alias

Trojan Horse.LC [Panda], TrojanDownloader.Win32.Small.ai [Kaspersky], Win32/Small.AI!Trojan [Computer Associates],

Category

Downloader: A program designed to retrieve and install additional files, when run. Most will be configured to retrieve from a designated web or FTP site.

Trojan: Any program with a hidden intent. Trojans are one of the leading causes of breaking into machines. If you pull down a program from a chat room, new group, or even from unsolicited e-mail, then the program is likely trojaned with some subversive purpose. The word Trojan can be used as a verb: To trojan a program is to add subversive functionality to an existing program. For example, a trojaned login program might be programmed to accept a certain password for any user's account that the hacker can use to log back into the system at any time. Rootkits often contain a suite of such trojaned programs.

Origins

Author

Illwill

Others By This Author

Acid Reign · Acid Reign 2.0 · AIMJacker · AIMJacker 1.0 · AIMJacker 2.0 · Half Life Jacker 1.0 · Ill Eagle 1.0 · Ill ICQ Notify · Ill ICQ Notify 3.1 · Ill ICQ Notify 3.2 · Ill-Aim Jacker 1.0 · ILL-Eagle 1.0 · Ill-Logger · Killer - Illwill · Killer Webdownloader 1.0 · Mini Webdownloader 1.0 · Shut-It Downloader 1.0 · The Ill-Logger · Trillian Rape 1.0 · URL2DWord · WebcamNow Jacker · WebDownloader · WebDownloader 0.1 · WebDownloader 0.2 · WebDownloader 0.3 · WebDownloader 0.5.0 Lite · WebDownloader 1.0 · WebDownloader 2.0 · WebDownloader Illwill 1.0 · WebDownloader Mini-web 1.0 · WebDownloader Mini-web 2.0 ·

Date of Origin

August, 2003

Detection and Removal

Manual Removal

Follow these steps to remove CMDGet 1.0 from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.

Stop Running Processes:

Kill these running processes with Task Manager:

Remove Files:

Remove these files (if present) with Windows Explorer:

CHARGENDoSAttack CIDSpoofer1.2 CISHack1.0 CLogger1.0 CMDBackDoor1.0 CMDGet1.0 CPCFW CPUHogNTDOS CPhreak CQMA