| Haan removal| Spyware Haan Information |
|---|
Name: Haan
Category: Keylogger
Dangerous: Yes |
Haan is one of Keylogger spywares.
Finding it on your computer means that your computer is infected with Keylogger and crucial data could be endangered or even lost.
Haan description by publisher: Creator: -= ev0luti0n HTTP key logger =-
~ expl0it_shad0w ~
Introduction
I wanted to make a key logger with a difference,
I dont think one´s been made like this yet, if it has let me know.
This is a Key logger that monitors all the key strokes to a file,
and it allows you to view them,
just by typing the victims IP address in the Internet Explorer
( or some other Internet browser ).
NOTE: the key logger sucks, so im working on a better one.
Instructions
Follow these instructions.
1. Rename "Server.exe" to what ever you want,
make it convincing, not like "TROJAN.exe" or "KEYLOGGER.exe".
2> Send it to them & tell them its a new hacking utility,
NOTE: Try binding it with a real one. If you know how.
( Once the victim opens it, it hides in memory & monitors all the key strokes on the computer,
so you can view them with an Internet Browser like MSIE. )
3> Connect to there machine on port 80 with an Internet browser, as stated above.
Type in there IP address into it & just hit Enter.
For example if the victims IP address was 127.0.0.1 you type in 127.0.0.1 or
just 127.0.0.1.
4> have Phunn.
Trojan Removal
Follow these simple instruction to remove ALL traces of the trojan.
1> Goto inside the windows\system directory & remove all these any file.
smsg.html - Online HTML file
wincmd.exe - The Trojan Itself
Msvbrt60.dll - A needed DLL
evlog.dat - Stored keystokes
NOTE: If you cannot delete wincmd.exe, or any of the other any file,
just boot into MS-DOS & delete them there.
using the Del command.
2> Open up your Registry Editor & remove the following entry.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Wincmd - its a string.
3> Thats it.
This Keylogger is also known as: •Backdoor.Haan.
>> Delete Haan automatically - Download Spyware Doctor
| Haan Removal Instructions |
|---|
Kill the following processes wincmd.exe, ev0.exe | Remove the following files wincmd.exe in Windows\system\
ev0.exe in Windows\temp\server\server\
|
Bookmark Haan page
|