Institution

Overview

Vendor Description

From the doc: 'This 3.5KB (2KB compressed) uploader/downloader is the smallest auto-installing trojan that I know of. You can upload files or download urls. This makes a great backup trojan. Just bind it to your favorite full size trojan and you won't even know it's there until you need it. To create a new server open the client and click the 'E' at the top right corner.'
FWB: From the doc: 'This uploader is the perfect tool to manage a massive amount of computers. It injects it's threads into the windows shell allowing it to run without creating it's own process. Also this allows the server to access the internet as a trusted application. What could be more trusted than the windows shell? The server works with LANs, proxies and routers. The transfer manager is very intuitive. You can upload files to one or all servers. With a few clicks you can run your file on thousands of computers. Completely invisble! Files that end in '.exe' are ran, others are saved.'

Alias

Backdoor.Institon.11, Backdoor.Laphex, BackDoor-AJQ, TrojanDropper.Win32.Small.x,

Variants

Institution 1.1 · Institution FWB 1.1 · Institution FWB 1.2 ·

Origins

Author

Aphex

Others By This Author

AFX File Lace · AFX Tunneld · AFX Windows Rootkit 2003 · Aphex Command Line Tools · Aphex's FireWall Bypassing FTP Server with Screen Capture 1.0 · Aphex's Packet Sniffer · Aphex's Packet Sniffer 0.2.0 · Aphex's Packet Sniffer 0.3.1 · Aphex's Packet Sniffer 0.3.2 · Aphex's Packet Sniffer 0.3.3 · Aphex's Polymorphic Web Downloader · Aphex's Web Downloader · Aphex's Web Downloader 0.3.0 Lite · Aphex's Web Downloader 0.4.0 Lite · Aphex's Web Downloader 0.6.0 Lite · Aphex's Web Downloader 0.7.0 Lite · File Nail · Institution 1.0 · Institution 1.1 · Institution FWB 1.1 · Institution FWB 1.2 · Institution Open · Institution Open 0.1.1 · Kuang2 Web Updater · Kuang2 Web Updater 1.0 · Kuang2 Web Updater 1.1 · LAN Sniffer 1.0 · Lite-SOCKS · Micro Bot 1.0 · Polymorphic Downloader · Polymorphic Downloader 2.0 · Polymorphic Downloader 3.0 · Polymorphic Web Downloader Generator 1.0 · Remote AOL Password Cracker 2.0 · Sinister Uploader 1.0 · Socks4 Proxy 1.0 · Streaming Audio Trojan 1.0 · Tiny Uploader · TrojanDropper.Win32.AphexLace.b · TrojanDropper.Win32.Delf.ae · TrojanSpy.Win32.Delf.bf · Tunneld 2.0 · WebDownloader · WebDownloader 0.1 · WebDownloader 0.2 · WebDownloader 0.3 · WebDownloader 0.5.0 Lite · WebDownloader 1.0 · WebDownloader 2.0 · WebDownloader Illwill 1.0 · WebDownloader Mini-web 1.0 · WebDownloader Mini-web 2.0 ·

Group

EES

Others By This Group

Aphex Command Line Tools· Aphex's FireWall Bypassing FTP Server with Screen Capture 1.0· Aphex's Packet Sniffer· Aphex's Packet Sniffer 0.2.0· Aphex's Packet Sniffer 0.3.1· Aphex's Packet Sniffer 0.3.2· Aphex's Packet Sniffer 0.3.3· Aphex's Polymorphic Web Downloader· Aphex's Web Downloader· Aphex's Web Downloader 0.3.0 Lite· Aphex's Web Downloader 0.4.0 Lite· Aphex's Web Downloader 0.6.0 Lite· Aphex's Web Downloader 0.7.0 Lite· Institution 1.0· Institution 1.1· Institution FWB 1.1· Institution FWB 1.2· Institution Open· Institution Open 0.1.1· Iowa's Joke Maker· Kuang2 Web Updater· Kuang2 Web Updater 1.0· Kuang2 Web Updater 1.1· LAN Sniffer 1.0· Micro Bot 1.0· Polymorphic Downloader· Polymorphic Downloader 2.0· Polymorphic Downloader 3.0· Polymorphic Web Downloader Generator 1.0· Remote AOL Password Cracker 2.0· Sinister Uploader 1.0· Socks4 Proxy 1.0· Streaming Audio Trojan 1.0· WebDownloader· WebDownloader 0.1· WebDownloader 0.2· WebDownloader 0.3· WebDownloader 0.5.0 Lite· WebDownloader 1.0· WebDownloader 2.0· WebDownloader Illwill 1.0· WebDownloader Mini-web 1.0· WebDownloader Mini-web 2.0·

Email

unremote@knology.net

Date of Origin

Variants from August, 2002 to May, 2003

Detection and Removal

Manual Removal

Follow these steps to remove Institution from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.

Stop Running Processes:

Kill these running processes with Task Manager:

Remove Files:

Remove these files (if present) with Windows Explorer:

Inspiration1.1 Inspiration1.2SE InstaFinder InstallShieldScriptCracking InstantAccess Institution Institution1.0 Institution1.1 InstitutionFWB1.1 InstitutionFWB1.2