RAD 1.2.3

Overview

Vendor Description

Commands for the rad system(i am SO tempted to paste source code here and let you all figure it out): printfile prints content of a file to the screen(with line numbers) password sets read system password(required for logon, default is 'default') port sets the rad system port, do NOT use port 23, most telnet clients will automatically go into vt100 terminal mode, and you won't be able to see shit from rad if you do that, so use your fucking head, comprende? restart ('s' for soft restart, 'h' for hard restart call) restarts the rad system. soft restart will restart the system with it still running. hard will shut the system down, saving all variables and settings, coming back up at the next windows startup. appendfile type as 1 will write to the beginning of the file, type 2 appends to the end of the file. since(must i say it again?) '}' is the command character, this means you can append entire paragraphs opposed to shitty vt100 one liners, *wicked ass smile*. truncline removes a specified line from a file editfile edits a specified line number(blah blah blah....remember...the '}'...so have fun with multiple line entries! (fun as fuck i might add)) delfile oh shit....if you can't figure this fucking thing out. btw, if you get erors...think of this.....FILE ATTRIBUTES DUMBASS! just like windows, if you wanna delete a readonly, set the attributes, that ones for you dan, have fun. =) clear clears the screen setwelcome sets the welcome message on the rad system movefile moves/renames file viewtime type 1 view all, 2 views date, 3 views time settime sets system time setdate sets system date shell shells to a filename(executable or otherwise) type 0 starts the application as hidden, type 1 as normal, type 2 as minimized, type 3 as maximized tip: with windows 95/98(nt?) shelling to 'start.exe' with ANY filename as a paramater to start.exe will open the file with the default viewer. (example: shell 1 start.exe http://www.mypage.com) will open up the default windows browser to www.mypage.com last displays last given command copyfile copies a file fileinfo returns file attributs fileset sets file attributes (number forms i might add, argument addition IS allowed) system returns the rad systems operating parameters and settings setvar sets a user variable(1 through 20 allowed), these are saved between sessions, so you or any other user logging in may view them for reference. (yes, they may contain carriage returns) viewvar returns a user variable value cdrom type 'open' opens the cdrom tray, type 'close' closes the cdrom tray regkeyedit edits registry key values(local machine 'master path', translation: no hkey_local_machine required/allowed) regkeydel deletes a registry key(same applies about 'master path' issue) regkeyview returns a registry key's value(same applies about 'master path' issue) regkeysview returns all registry key's in path regdirview returns all registry directories in path regdircreate creates a registry directory regdirdel delete registry directory apppopup brings a window to the users foreground based on it's window caption(titble bar caption) sendkeys sends keys to the users machine(uses windows 'key-layer' formatting) example sends string and sends the enter key: sendkeys rad is kicking my ass{ENTER} dir <2nd optional interval(in seconds)(only applicable if path is specified)> returns file/dir listing to the user. time interval will pause the specified number of seconds between file/dir returns(long datatypes will be rounded to the nearest whole) volume returns current drive volume label remdir removes a directory mkdir creates a directory setname sets the rad system name msgbox displays a message dialouge to the user containing specified text inputbox displays a dialouge to the user allowing them to respond help command not yet implemented(inline help) cd changes current directory cdrive changes current drive putini adds/replaces a value in a .ini style file getini returns a value in a .ini style file comchar sets a new command character(default is '}') sendmail sends an email from the host machine(can we say dr. spoofy?) proc lists running processes(beta) kill kills a specified process(beta) type defines whether to attempt to kill a process by PID, or by exename(path *somtimes* requested by w95) exitcode required when killing a process by PID

Alias

Backdoor.Rad [Kaspersky], Backdoor/Rad [Computer Associates], BackDoor-GA [McAfee], Bck/Rad [Panda], security risk or a "backdoor" program [F-Prot], Win32.Rad [Computer Associates],

Category

RAT: A Remote Administration Tool, or RAT, is a Trojan that when run, provides an attacker with the capability of remotely controlling a machine via a ""client"" in the attacker's machine, and a ""server"" in the victim's machine. Examples include Back Orifice, NetBus, SubSeven, and Hack'a'tack. What happens when a server is installed in a victim's machine depends on the capabilities of the trojan, the interests of the attacker, and whether or not control of the server is ever gained by another attacker -- who might have entirely different interests. Infections by remote administration Trojans on Windows machines are becoming as frequent as viruses. One common vector is through File and Print Sharing, when home users inadvertently open up their system to the rest of the world. If an attacker has access to the hard-drive, he/she can place the trojan in the startup folder. This will run the trojan the next time the user logs in. Another common vector is when the attacker simply e-mails the trojan to the user along with a social engineering hack that convinces the user to run it against their better judgment.

Backdoor: A secret or undocumented means of getting into a computer system, or software that uses such a means to penetrate a system. Some software has a backdoor placed by the programmer to allow them to gain access to troubleshoot or change the program. Software that is classified as a "backdoor" is designed to exploit a vulnerability in a system, and open it to future access by an attacker.

Origins

Author

Acidpool

Others By This Author

RAD ·

Date of Origin

August, 1999

Detection and Removal

Manual Removal

Follow these steps to remove RAD 1.2.3 from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.

Stop Running Processes:

Kill these running processes with Task Manager:

Remove Files:

Remove these files (if present) with Windows Explorer:

R4mp4g31.3 R:E:M:O:T:E RA-HACK RAConsoleBeta1 RAD RAD1.2.3 RAMEater RAMEater1.2 RAR RARPasswordCrackerv3.12