SMS Pager

Overview

Vendor Description

From the doc: 'This is a small sms pager that you bind to your favourite Trojan server so you can receive sms pagers to your cell phone. This uses the ICQ service.'

Alias

destructive program [F-Prot], SMSPager-A, SMSPager-A [McAfee], Trj/W32.Feares [Panda], trojannotifier.win32.feares, TrojanNotifier.Win32.Feares [Kaspersky], Win32/Feares!Trojan [Computer Associates],

Category

Notifier: Any tool designed for stealth notification of an attacker that a victim has installed and run some pest. Such notification might be done by FTP, SMS, SMTP, or other method, and might contain a variety of information. Often used in combination with a Packer, a Binder and a Downloader.

Trojan: Any program with a hidden intent. Trojans are one of the leading causes of breaking into machines. If you pull down a program from a chat room, new group, or even from unsolicited e-mail, then the program is likely trojaned with some subversive purpose. The word Trojan can be used as a verb: To trojan a program is to add subversive functionality to an existing program. For example, a trojaned login program might be programmed to accept a certain password for any user's account that the hacker can use to log back into the system at any time. Rootkits often contain a suite of such trojaned programs.

Origins

Author

Others By This Author

Cold Fusion · Cold Fusion 1.00 · Cold Fusion 1.031 · Cold Fusion 1.1 b2 · Cold Fusion 1.1041 · Cold Fusion 1.1d · Cyn · Cyn 1.01 · Cyn 1.02 · Cyn 1.02a · Cyn 1.03 · Cyn 1.03a · Cyn 1.2 · Cyn 1.21 · Cyn 2.0 · Cyn 2.1 · Cyn 2.2 · Fearless Lite · Fearless Lite 1.0 · Fearless Lite 1.01 · LAN Bypasser · LANfiltrator · LANfiltrator 0.6b · LANfiltrator 0.7b · LANfiltrator 1.0b · LANfiltrator 1.1 · Sin-4-Cyn ·

Date of Origin

October, 2002

Detection and Removal

Manual Removal

Follow these steps to remove SMS Pager from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.

Stop Running Processes:

Kill these running processes with Task Manager:

Remove Files:

Remove these files (if present) with Windows Explorer:

SETPWD1.0 SH.Over.C SLAMMagazine SMSDOSforSiemens3568i SMSManagerforSiemens SMSPager SMSSpoof SNMPSniff SNMPSniff0.8b SNMPSniff1.11