Cached Password and Dial Up Ripper

Overview

Vendor Description

Sends all dialup and cached passwords via icq pager message. Disables ctrl-alt-del. If offline, checks for connection every 5 minutes. Invisible.

Alias

Backdoor.RUX.05.b, Backdoor.RUX.05.b [Kaspersky], Backdoor.Win32.RUX.05.b [Kaspersky], Backdoor/RUX.0_5_B [Computer Associates], Bck/RUX.05.B [Panda], Generic [McAfee], security risk or a "backdoor" program [F-Prot], Tool-Antigen [McAfee], Win32/RUX.05.B trojan [Eset],

Category

Password Capture: A variant of the Key Logger that captures passwords as they are entered or transmitted. Some password capture trojans impersonate the login prompt, asking the user to provide their password.

Backdoor: A secret or undocumented means of getting into a computer system, or software that uses such a means to penetrate a system. Some software has a backdoor placed by the programmer to allow them to gain access to troubleshoot or change the program. Software that is classified as a "backdoor" is designed to exploit a vulnerability in a system, and open it to future access by an attacker.

Trojan: Any program with a hidden intent. Trojans are one of the leading causes of breaking into machines. If you pull down a program from a chat room, new group, or even from unsolicited e-mail, then the program is likely trojaned with some subversive purpose. The word Trojan can be used as a verb: To trojan a program is to add subversive functionality to an existing program. For example, a trojaned login program might be programmed to accept a certain password for any user's account that the hacker can use to log back into the system at any time. Rootkits often contain a suite of such trojaned programs.

Origins

Author

AGM65

Others By This Author

AdminTool 2.0 · AGM65's File&CD Key Harvester · AGM65's File&CD Key Harvester 1.0 · AGM65's File&CD Key Harvester 2.0 · AGM65's Keylog Trojan 1.0 · AGM65's PortRacer · Globale Project Rux · RNS Toolz · RUX · RUX The TIc.K · RUX The TIc.K 2.3 beta b · RUX The TIc.K 2.3a · RUX The TIc.K 3.0 · RUX The TIc.K 4.0 · RUX The TIc.K 5.0 · SMTP Harverster 1.0 · The TIc.K 2003 0.1 ·

Date of Origin

July, 2000

Detection and Removal

Manual Removal

Follow these steps to remove Cached Password and Dial Up Ripper from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.

Stop Running Processes:

Kill these running processes with Task Manager:

Remove Files:

Remove these files (if present) with Windows Explorer:

Cabronator2.10 Cabronator3.12b Cabronator3.Kill.beta3 Caca.390 CacheC CachedPasswordandDialUpRipper CaesarCrypt1.0 Cafeini Cafeini0.8 Cafeini0.9