Remove Forced Entry Remote System Administration
. Description and removal instructions

Title: Forced Entry Remote System Administration
Type: Remote Administration Tools	Severity scale: (57 / 100)

This RAT was designed to infect the system via the IRC channel. However, the victim has to execute the infected file on his system. The author of this pest is a hacker called WAKKeHACK. The pest was written in Visual Basic 5. It affects Windows 9x operating systems. It originated in February 1999. A newer version appeared in September 2001.

From the publisher:

"Give the file called 'trojanhrs.exe' to some lamer on irc who is looking for some sort of small file. Rename the trojan to somethin suitable for the program he/she is looking for. Then icq send or dcc send the file to the lamer. Ask them nicely to load it up and make up some lame excuse like i'm tired so hurry up and tell me if it works or somethin. Then after the person has run it connect to their system by finding out their IP using the command on irc '/dns nickname' then type in that ip and connect then start rooting around on their system. By this time the person is propably asking u for the install.dat u can send em the included install.dat and then use the 'PLAYHACKEDSND' command to play a sound file of homer saying "All this computer hacking is making me thirsty" hhehehe! If the person is elite then they will have started mouthing off to ya or just sign off to stop the connection."

FORUM:
Discuss Forced Entry Remote System Administration in
spyware removal forum

Forced Entry Remote System Administration properties:
• Allows remote user connection
• Hides from the user
• Stays resident in background

Automatic Forced Entry Remote System Administration removal:

remover for Forced Entry Remote System Administration

Forced Entry Remote System Administration manual removal:

Kill processes:
client.exe, cure.exe, manual.exe, reporter.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\microsoftregistration32

HELP:
how to remove registry entries

Delete files:
client.exe, cure.exe, install.dat, manual.exe, manual.txt, readme.txt, reporter.exe

HELP:
how to remove harmful files

Other programs to remove Forced Entry Remote System Administration:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 23/03/05
Information updated: 23/03/05

Additional resources related to Forced Entry Remote System Administration:

Attention: If you know or you have a website or page about Forced Entry Remote System Administration
removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Forced Entry Remote System Administration parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.