Shooter3

Overview

Vendor Description

From the code: 'This Fakemail program was intended to show the weakness of SMTP, never to spoof anyone. The author of this program takes NO responsibility whatsoever for how this program is used.'

Alias

Flooder Program [Panda], Flooder.MailSpam.VB.d [Kaspersky], security risk or a "backdoor" program [F-Prot], Win32/Mail.d!Flooder!Trojan [Computer Associates],

Category

Spoofer: To spoof is to forge your identity. Attackers use spoofers to forge their IP address (IP spoofing). The most common use of spoofing today is smurf and fraggle attacks. These attacks use spoofed packets against amplifiers in order to overload the victim's connection. This is done by sending a single packet to a broadcast address with the victim as the source address. All the machines within the broadcast domain then respond back to the victim, overloading the victim's Internet connection. Since smurfing accounts for more than half the traffic on some backbones, ISPs are starting to take spoofing seriously and have started implementing measures within their routers that verify valid source addresses before passing the packets.

Flooder: A program that overloads a connection by any mechanism, such as fast pinging, causing a DoS attack.

Origins

Group

Dominique Software

Others By This Group

FakeMail·

Date of Origin

May, 2003

Detection and Removal

Manual Removal

Follow these steps to remove Shooter3 from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.

Stop Running Processes:

Kill these running processes with Task Manager:

Remove Files:

Remove these files (if present) with Windows Explorer:

Shakedown Shareaza ShockMailer1.0 ShokDial Shokdial4.1 Shooter3 ShootingmenuApplet ShopAtHomeSelect ShopNav ShopNav.IE