Gift removal

Spyware Gift Information
Name: Gift Category: RAT Date: 2001-09-28 Author: Tr\|force Dangerous: Yes

Gift is RAT which is malware.
Installing it is highly not recommended.

Gift description by Tr|force:

Vendor: ´Everything should work apart from Delete HD, Ping´. 2.0: Vendor: ´This is the 1st build with a stable plugin system.´ 2.3: Vendor: ´A huge update here, namely a applicationming language change! I´ve kept some features from the old GiFt but serveral new ones have been added! See for yourself!´.2.4: Vendor: ´GUI has also been improved a bit & made easier to use´.2.5: Vendor: ´Right here´s a little beta release. Only includes the server & client (both compressed). EditServer is still underway, & this is to try the new server functions like messagebox manager etc. Just test it lots to see if the new functions work o.k. :-) Also try compressing it with different compressors to see which gives the best rate & it still works effectively.´ Mini-GiFt 0.1 Well the small server idea was thrown right out the window!. well as you can probably see from the server size its not under 20kb, i wrote it in delphi but it´s still a cool little uploader/backdoor. I´m still working on an asm version :0) Here´s a list of things it should do: * Once run, delete the oriinal file * Copy itself to Windows directory * Listen on port 10101 * You can, upload, download or run any file tr|force

This RAT is also known as:

•Backdoor.Gift.
• Backdoor.Gift.20.
• Backdoor.Gift.211.
• Backdoor.Gift.23.
• Backdoor.Gift.24.
• Backdoor.Gift.25.
• Backdoor.Gift.a - named by Kaspersky.
• Backdoor.Gift.b - named by a.
• Bckdoor.MiniGift.01.
• Backdoor/Gift.A!Server - named by Computer Associates.
• Bck/Gift - named by Panda.
• security risk or a "backdoor" program - named by F-Prot.
• SennaSpy2001 - named by McAfee.

>> Delete Gift automatically - Download Spyware Doctor

Gift Removal Instructions
Kill the following processes client.exe, editserver.exe, giftclient.exe, icochanger.exe, logger.exe, mouseplugin.exe, passwords.exe, server.exe
Remove the following files client.exe, editserver.exe, giftclient.exe, how to use.txt, icochanger.exe, logger.exe, mouseplugin.exe, passwords.exe, plugins readme.txt, read me.txt, readme.txt, readmefirst.txt, server.exe.

Bookmark Gift page

Previous Spyware: Remove GIDS Patch

Next Spyware: Remove Gift 1.07