> Spyware Encyclopedia Page 48 > Doped 1.0b

Doped 1.0b removal

Spyware Doped 1.0b Information
Name: Doped 1.0b Category: RAT Date: 2000-05-18 Author: Zeromatic Coded in: Visual Basic Dangerous: Yes

Doped 1.0b is RAT which is malware.
Installing it is highly not recommended.

Doped 1.0b description by Zeromatic:

Creator: d0ped Trojan is a client/server thing, running under any Windows9x or XP. The zip-file containing this textfile, also includes a setup file. Install the packets, then walk via the Start/Application menu. You will find a new menue called "Telhack Inc", whereunder you will find the Client app. The server program is simply named "d0ped.exe" as default. As far as i know, CTRL-ALT-DEL (which - ofcourse - your´e able to disable:) list will display the EXE-name of the file as a running process. You might see this "trojan" as a later version of the "Rths"-trojan? Well HECK it isn´t! This one isn´t to be operated by any terminal session, it has its own client program. The d0ped Trojan also contain a lots of (new) amusing functions, for example: * Snoop on users Internet Explorer navigation * Edit any fileystem * Process & hardware status * Constant change-of-system-wide-parameters status * Hide mousecursor * Very nice black textscreen function * A silly "Please Enter passwords:" function * Automatic search for Internet login/password * Desktop management * "Use ´Em": use the server to initiate a 3rd session. (Use the target as a secound terminal). * Or initiate a hidden pingflood versus.. anything. * Desktop Management * Port- & Password Settings * A cute "incomming information"-textbox - Default port is: 1661 - There´s no password define as default. Zeromatic

This RAT is also known as:

•Backdoor Program - named by Panda.
• Backdoor.Dopedoor.10 - named by a.
• Backdoor.Dopedoor.10 - named by Kaspersky.
• Backdoor/Dopedoor.1_0 - named by Computer Associates.
• d0ped - named by o.
• Generic BackDoor.b - named by McAfee.
• security risk or a "backdoor" program - named by F-Prot.
• SennaSpy2001 - named by McAfee.
• Win32.Doped.10 - named by Computer Associates.
• Win32/Doped.10!Trojan - named by Computer Associates.

>> Delete Doped 1.0b automatically - Download Spyware Doctor

Doped 1.0b Removal Instructions
Kill the following processes d0ped.exe, d0pedclient.exe
Remove the following files d0ped.exe, d0ped.txt, d0pedclient.exe, setup.lst.

Bookmark Doped 1.0b page

Previous Spyware: Remove Dope Wars 2001

Next Spyware: Remove Dopewarez.c - Exploit for dopewars-1.4.4 client/server