> Spyware Encyclopedia Page 37 > Chupacabra

Chupacabra removal

Spyware Chupacabra Information
Name: Chupacabra Category: RAT Date: 2001-09-28 Coded in: Visual Basic 5. Dangerous: Yes

Chupacabra belongs to RAT spyware category.
Causes mouse lurch, shuts down Windows, formats hard disk, hides/shows the taskbar, gives Win 3.x look to machine at startup, etc. It's presense means that your computer is infected with malicious software and is insecure.

Chupacabra description by publisher:

Functions (Creator): Remote Functions Get Server Path- Gets the location from which the server is running from. HD Letter- Gets the Hard Drive letter. Computer Owner- Gets the name of the computer owner. System Directory- Gets the system directory. Current ICQ #- Gets the ICQ # being used Computer Name- Gets the name of the computer (shown when someone pings you) Visible Windows- Gets the windows that made to be seen (in other words you can not see hidden ones) Local Time- Gets the time on the persons computer. Registered Organization- Gets the organization the computer is registered to. Windows Directory- Gets the windows directory. À Shit Logoff- Logs the person off the computer. Close Windows- Closes Windows Shutdown- Shuts down Windows Reboot- Restarts the computer Close Server- Closes the server so no more conenctions made to be made but can still be used after the user restarts. Start/Stop KrAaZy Mouse- Starts/Stops the mouse jumping all over the f*cking place. Hide/Show Taskbar- Hides/Shows the taskbar F*ck It Over- F*cks up the computer & they´ll most likely need to format to save it. Win 3.1- When the user restarts their computer will start up with the look of Win 3.1 Format- Format the damn hard drive Start Screensaver- What the f*ck do you think? It starts the screensaver. Disable/Enable Ctrl Alt Del- Enable/Disables control alt delete. À Requires Extra Shit (make sure to type in the Extra Shit box for these) Send Message- Opens a message box on the persons computer with whatever message you specify. Delete File- Deletes a file you choose Set Registered Organization- Sets the reg. org to whatever you choose Set Computer Name- Sets comp. name to what you choose. Start up Message- When the user starts their computer they´ll receive a message that you type in. Set IE Caption- Change the MS Internet Explorer caption to anything you choose. Set Computer Owner- Sets comp owner como quieras Send to URL- Forwards them to the URL you specify. (If you need any of these to explain what each function does then that is just sad. Almost all of them are self explanatory.) Local Functions Enable Multi ICQ- Allows you to run more then one ICQ at a time. Disable Multi ICQ- DIS-allows you to run more then one Enable Oob Patch- Patches a bug in the registry that´s exploited for nukings. Change Comp. Owner- Change who the owner of the comp. is Change Comp Name- Change the comp. name (what is show when you´re pinged) Change Last ICQ Owner- Used so when you start ICQ it doesn´t open on someone elses ICQ # Change Reg. Org.- Change the registered organization on your computer Change IE Caption- Change the MS Internet Explorer at the top of IE to what you choose.

This RAT is also known as:

•Backdoor.Chupa.
• Backdoor.Chupa - named by Kaspersky.
• Backdoor.Win32.Chupa - named by Kaspersky.
• Backdoor/Chupa - named by Computer Associates.
• Backdoor/Chupa!Client - named by Computer Associates.
• BackDoor-CQ - named by McAfee.
• Bck/Chupacabra - named by Panda.
• security risk or a "backdoor" program - named by F-Prot.
• Win32.Chupa - named by Computer Associates.
• Win32/Chupa trojan - named by Eset.

>> Delete Chupacabra automatically - Download Spyware Doctor

Chupacabra Removal Instructions
Kill the following processes chupacabra.exe, server.exe, winprot.exe
Remove the following files chupacabra.exe, chupacabra.rtf, server.exe. winprot.exe in Windows\system\

Bookmark Chupacabra page

Previous Spyware: Remove Chroot_break.c

Next Spyware: Remove CIA