> Spyware Encyclopedia Page 75 > IWAnywhere

IWAnywhere removal

Spyware IWAnywhere Information
Name: IWAnywhere Category: RAT Author: Ap0calaps Coded in: Delphi Dangerous: Yes

IWAnywhere is RAT which is malware.
Installing it is highly not recommended.

IWAnywhere description by Ap0calaps:

Creator: Version 1.0: iwAnywhere´s a basic modified http server which you can use to browse via other peoples any file. Just send the server.exe file to a victim & enter there ip in any webexplorer and you can view & download all there any file on all drives. It is extremely basic & most likely has bugs as that moment, but it easily has the potential to become a full blown trojan. No notification or edititing functions have been added yet as im to lazy but these will come in the future, for now its just a novelty toy. Version 1.1: Added lots of new functions to the server these include: proper file manager, process manager, window manager, grab screen, edit server capibility, edit settings via explorer capability, dialup & cached password grabber, pc & home data & general stuff (open cd-rom etc). Along with these features iwAnywhere now has a decent gui in the explorer. I have bug checked it quite a bit & have ironed out all the bugs I´ve found but if you find a new one please report it to me. It should be noted that iwAnywhere 1.1 is NOT Windows 2000/NT compatible, it is been tested on the 9x systems & it works fine. I don´t know whether it works on Windows XP, but I´d doubt it. I´ll release a minor version update soon to fix any bugs that may surface and to clean up the code in any way I can. That is all for now :). Version 1.1.1: As promised, here´s a minor release addressing some bugs, the server size, and windows compatibility. The following is a list of changes: - Password bug fix: There where 2 issues with the server password 1: When logining in via your explorer if you where to just hit the enter key instead of clicking the Verify Password button you´d get a 404 message, this has been fixed. 2: The server would sometimes ignore the password settings & either tell you you had inputed a wrong password even though it was right & it´d ignore a password altogether, this has also been fixed. - Data page bug fix: Sometimes the data page would come up obscured, this was because of lazy coding on my behalf. The bug has been fixed & iwAnywhere now uses a faster and completely stable method to generate the html any file. - The default server size has been reduced by just over 60kb. - iwAnywhere should now work on all Windows Systems, it is been tested on Windows 95/98/ME & 2K, & it should be working on Windows XP. If you´re having troubles with iwAnywhere on Windows XP please contact me at ap0calaps@hotmail.com. These are all the changes that have stealn place. I believe this will be the only & last minor release for version 1.1 of iwAnywhere, but as always please contact me if smth f*cks up. Version 1.1.2 Final: This is the final version for the 1.1 release of iwAnywhere, one additional bug (which was stupidly added in 1.1.1) has been removed. That bug was the server ignoring the settings for the registry startup option, it´d always make the application startup using the HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\ startup key. Work will soon begin on iwAnywhere 1.2, more data will be added at the web-site soon. Flipmode informed me that version 1.1.1 is compatible with Windows XP which makes iwAnywhere 1.1.1 compatible with all versions of windows. Major Version: 1.2 Right, here´s version 1.2 of iwAnywhere. It is been tested on Windows 2K,95,98,98SE, and ME & as far as I know it is working fine without any bugs. It´s more than likely that it´ll work on Windows XP but some confirmation would be nice. The server is slightly smaller than iwAnywhere V1.1.2 but it has many new features including, 3 new startup methods, http notification, chat, messaging, keylogging, win2k compatible data, resolution thingie, clip board management & a web downloader. It should also be noted that no antivirus companies have managed to detect version 1.1.1 & 1.1.2 of iwAnywhere so 1.2 should stay undetected for quite some time :). Have fun.

This RAT is also known as:

•Backdoor.Apocalaps.10.
• Backdoor.Apocalaps.11.
• Backdoor.Iwanywhere.11.
• Backdoor.Iwanywhere.12.

>> Delete IWAnywhere automatically - Download Spyware Doctor

IWAnywhere Removal Instructions
Kill the following processes edit server.exe, server.exe
Remove the following files edit server.exe, http notification.txt, readme.txt, server.exe. index.html in Windows\web data\

Bookmark IWAnywhere page

Previous Spyware: Remove IWantNetSex Shortcut Creator

Next Spyware: Remove IWAnywhere 1.0