> Spyware Encyclopedia Page 42 > Cyanure 1.0

Cyanure 1.0 removal

Spyware Cyanure 1.0 Information
Name: Cyanure 1.0 Category: RAT Date: 2002-12-10 Author: Cyanure Coded in: C++ Dangerous: Yes

Cyanure 1.0 is RAT which is malware.
Installing it is highly not recommended.

Cyanure 1.0 description by Cyanure:

Vendor: ´Ceci est la premiÞre version d´une backdoor NT non detectable par aucun Anti-Virus. Cette particularitÚe lui vient du fait quelle utilise a 90% des soft codÚ par MS lui-mÛme... AprÞs l´installation de la backdoor vous disposerer d´un key logger qui crÚera le fichier ´winkc.dll´ dans le rÚpertoire system s´il n´existe pas avec les ÚvÞnements du clavier. Vous pourrez aussi avoir accÞs au systeme par deux invite de commande distant.´ This is a NT Backdoor. Put all .exe in C:\Winnt\Temp "Back-Install.exe" is the only file you can rename To install the backdoor launch "Back-Install.exe" on target system After installation, the key logger will create "winkc.dll" on WinSysDir You´ll be able to access to the target system with two distant command lines To connect to the 1st one type : nc x.x.x.x 8080 To connect to the 2nd one type : remote /c x.x.x.x secret "Regini.exe" will be used to access to the distant registry "Install.reg" will be used to lauch the application at every reboot Cyanure

This RAT is also known as:

•Backdoor Program - named by Panda.
• Backdoor.Cyanure - named by Kaspersky.
• Backdoor.Win32.Cyanure - named by a.
• Backdoor/Cyanure - named by Computer Associates.
• Backdoor/Cyanure!Server - named by Computer Associates.
• Keylog-Cyanure - named by McAfee.
• security risk or a "backdoor" program - named by F-Prot.

>> Delete Cyanure 1.0 automatically - Download Spyware Doctor

Cyanure 1.0 Removal Instructions
Kill the following processes kl32.exe, soon.exe, start.exe
Unregister the following DLLs and reboot keylog.dll.
Remove the following files install.cpp, keylog.dll, kl32.exe, readme.txt, soon.exe, start.cpp, start.exe.

Bookmark Cyanure 1.0 page

Previous Spyware: Remove Cxterm Buffer Overflow Exploit

Next Spyware: Remove Cyber