Remove InCommand. Description and removal instructions

 
Title: InCommand

Type: Remote Administration Tools
Severity scale:InCommand severity is 70  (70 / 100)
 
InCommand is a large RAT virus family. As the number of the version grows, so does the possibility of infection and the amount of damage that can be done by this program. This pest has a lot of dangerous features: it logs user keystrokes, takes screenshots of user activity, etc. The author of this pest is Stoner and Bogart. Several versions appeared from April 1996 to July 2004. The RAT was written in Delphi programming language, and recent versions were compressed.

From the publisher:

"First of all, click on 'About' on the client for help. The ICQ notify will _NOT_ page you _unless_ you enter YOUR ICQ UIN in the icq notify box and click notify. Then it will start paging you. Every time the victim gets on. The screen capture is slooow! It should be fixed in next versions to come! So you will have to live with it. If you need help or have a bug to report, please visit the forum that is shown in the 'ABOUT' on the client. But it pretty much runs awesome."



InCommand properties:
• Allows remote user connection
• Takes and sends out screenshots of user activity
• Logs keystrokes
• Hides from the user
• Stays resident in background

Automatic InCommand removal:

remover for InCommand

InCommand manual removal:

Kill processes:
-1229473892.exe, 7b206d3f.exe, backdoor.incommander.plugin.regedit.a.exe, betaclientc.exe, server1.4.exe, server1.5.exe, server153.exe, server17-b2.exe, [system, root]\\incsrv.exe, [system, root]\\info32.exe, [system, root]\\msie50h.exe, [system, root]\\olemon32.exe, [system, root]\\rsapi.exe, scanner.exe, server.exe, client.exe, client_1_1.exe, client_1_3.exe, client_1_4.exe, client_1_5.exe, client_1_53.exe, client_12_pw.exe, clientcmpt.exe, editinc.exe, editserver.exe, lookup.exe, regclient.exe, regserv.exe
Unregister DLLs:
icon.dll, inf32.dll

Delete files:
-1229473892.exe, 7b206d3f.exe, backdoor.incommander.plugin.regedit.a.exe, betaclientc.exe, client.exe, client_1_1.exe, client_1_3.exe, client_1_4.exe, client_1_5.exe, client_1_53.exe, client_12_pw.exe, clientcmpt.exe, editinc.exe, editserver.exe, fixes.txt, icon.dll, inf32.dll, lookup.exe, msgform.dfm, na plugins.txt, readme first.txt, readme.txt, regclient.exe, regserv.exe, scanner.exe, server.exe, server.txt, server1.4.exe, server1.5.exe, server153.exe, server17-b2.exe, [system root]\\incsrv.exe, [system root]\\info32.exe, [system root]\\msie50h.exe, [system root]\\olemon32.exe, [system root]\\rsapi.exe, unit1.dfm, vote.txt

Other programs to remove InCommand:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 30/03/05
Information updated: 30/03/05

Additional resources related to InCommand:

Attention: If you know or you have a website or page about InCommand removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about InCommand parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: