> Spyware Encyclopedia Page 112 > Remote Connection

Remote Connection removal

Spyware Remote Connection Information
Name: Remote Connection Category: RAT Date: 2003-03-09 Author: Johnny Tucker Coded in: Visual Basic Dangerous: Yes

Remote Connection is RAT which is malware.
Installing it is highly not recommended.

Remote Connection description by Johnny Tucker:

This is a Client/Server application. It allows access to another computer through the internet. The applications has the following attributes: *Connects to the remote computer through the IP address *Access to any file (download/delete) *Key logger on the remote computer *Desktop screen capture of the remote computer *Able to shutdown/logoff/restart remote computer *Able to start up Web explorer at the address of your choice *One way messaging to the remote computer ***NEW to Version 2.1*** *Password protection *Able to run pogram(s) on remote computer *Able to shutdown server application on remote computer The Server Specs: To run the server on a remote computer, just run the setup file to install. It installs the application in file folder called: "remote connection server", puts a string in the registry that allows it to run at startup & puts a DLL file in the windows/ system folder (the dll is used for desktop capturing).The default password is: default. The password is in the file pwd.jpg in the program´s directory. To change the password, simply load the file into notepad . To uninstall the application- you simply use the uninstall in the app. folder. This will not delete the folder & application if it´s running. Restart the computer & manually delete the folder. This application isn´t visible to the user. The port 1001 is used for connection. The Client Specs: To run this application you simply run the client_setup.exe. A valid IP address must be inputed for this application to work. The desktop capture image(JPG) will be saved in the program´s location & will be timestamped. The keylog file will also be saved in the programs´s location & will be timestamped. This application only works on Windows 95/98/ME/2000. Remote Connection was applicationmed using Visual BASIC 6.0 language. updates: Version 2.1 Added: * Able to run a application(s) on remote computer * Remote shutdown of server application. * Password Protection. Tucker

This RAT is also known as:

•Backdoor.RemoteConnection.21.b.
• PWS-RedNeck trojan.

>> Delete Remote Connection automatically - Download Spyware Doctor

Remote Connection Removal Instructions
Kill the following processes client.exe, client_setup.exe, get_ip.exe, server.exe, server_setup.exe
Remove the following files client.exe, client_setup.exe, get_ip.exe, readme.txt, server.exe, server_setup.exe.

Bookmark Remote Connection page

Previous Spyware: Remove Remote Config

Next Spyware: Remove Remote Connection 2.1