Remove Insane Network. Description and removal instructions

Title: Insane Network
Type: Remote Administration Tools	Severity scale: (60 / 100)

This RAT is based on Xtcp. This pest also offers the intruder a lot of functions (execute a program, download/upload file, etc.) that can turn the life of a simple user in to hell. It includes a dangerous "password cracker" ability. It means that the virus will try to hack victim's passwords. The author of this pest is a hacker called Suid Fow. Several variants (Insane Network 1.0, Insane Network 4.0, Insane Network 5.0) appeared from November 1999 to September 2001. The pest is written in Visual C++ programming language.

From the publisher:

"added onto the XTCP trojan by ShadowPenguin Systems Inc More improvements to come!!! check out our site at www.BlackCode.com

(1) ls Shows files in the specified folder. The output is displayed in the following order: attribute filename size date. The attributes are a: Archive d: Directory h: Hidden file r: ReadOnly file s: System file. However, unlike usual ls, you have to include the * in the path Example: ls c:\*.* : ls c:\windows\*.ini

(2) cat Views the contents of a text file. Example: cat c:\Setuplog.old

(3) cp Copys a file Example: cp c:\Setuplog.old c:\windows\aaa

(4) rm Deletes a file.

(5) ren Renames a file

(6) exec Runs a program, paramaters are allowed. Please note that if running a Windows GUI application, that application window will be opened "suddenly" on the target PC.

(7) mktext Creates a text file. Example: [r00t]#mktext c:\test.txt aaa bbb ccc ^D ctrl+D = ends input [r00t]#

(8) popup Popup a message dialog on the target Windows Example: popup Hello. I've hacked your PC. Sorry.

(9) shutdown Shutdown the target PC.

(10) reboot reboot the target PC.

(11) passwd [-s][-t][-d] PPP password logging. If no PPP connection is made after the installation is server, no log file will exist. Parameter: -s: begins logging -t: ends logging -d: deletes log file default (with no parameter): displays log file

(12) telnet Same as telnet.

(13) regrun [-c][-d][-l] Sets autorun option, adds value in the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Example: <1> regrun -c trojan c:\windows\trojan.exe trojan.exe will be exucuted when Windows is booted. <2> regrun -l List all autorun programs <3> regrun -d trojan Remove trojan from autorun

(14) Logout Just as the name says

(15) cad [-e][-d] cad -e: enable control-alt-delete cad -d: disable control-alt-delete

(16)snow

(17)reverse

(18)bomb

(19)melt

(20) task[-e][-d] task -e: enable taskbar task -d: disable taskbar

(21)crack Decrypts the file-sharing passwords If it doesn't return any info,they don't have sharing enabled.. :)

~Suid Flow"

FORUM:
Discuss Insane Network in
spyware removal forum

Insane Network properties:
• Allows remote user connection
• Hides from the user
• Stays resident in background

Automatic Insane Network removal:

remover for Insane Network

Insane Network manual removal:

Kill processes:
insane network.exe

HELP:
how to kill malicious processes

Delete files:
commands.txt, insane network.exe

HELP:
how to remove harmful files

Other programs to remove Insane Network:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 31/03/05
Information updated: 31/03/05

Additional resources related to Insane Network:

Attention: If you know or you have a website or page about Insane Network removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Insane Network parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.