**********************************
                  **********************************
                  **     VP Software presents     **
                  **         N O K N O K   8      **  
                  **      http://vpsoft.cjb.net   **
                  **********************************
                  **********************************


-= What is it ? : =-
Noknok is a client/server application which allows the client software
to monitor, administer, and perform other network and multimedia actions on
the machine running the server.  Noknok 8 is compatible with microsoft windows
95/98/Millenium edition. However, it is still not compatible with win2000.
[hope to fix it soon]

-= Advantages : =-
1. Antivirus do not recognize noknok as a trojan horse.
2. Fast server program, doesnt use system recources, totally invisible. 
3. The most powerful trojan [in my humble opinion]

-= Server program =-
// Noknok8 server is not compatible with older noknok servers ! [dont ask why]
1. If server.exe is executed - firstly it copies itself to windows\scanreg.exe
   than - loads itself from the new path but it DOES NOT delete itself
   from the old path [not like other trojans] So victim may simple remove
   server.exe from his system but that wont help.
2. It opens around 6-7 ports .. [all starts with 6 and ends with 6]
   except chat system - it uses 661 port and ftp server - 166.
3. If victim removes entries to noknok server from registry that wont help
   either. [server will add necessary keys again]
4. The safest way to remove server prog is to run client.exe and to click
   "remove server" button :-)


-= IP addresses : =-
// written for newbies
There are two kinds of ip addresses : dynamic & static. Dynamic ip addresses
changes each time user reconnects to ISP [internet  service provider]. 
Static ip addresses are always the same. It is a bit confusing if your victim
has a dynamic ip address, so thats why there are ICQ and Email notifications
which informs you when your victim is online and sends you current victim's 
ip address. [if you are testing icq notify on your self - it wont work because
icq security system does not allow to send and recieve messages from the same
ip address] How to get ip addy ? There are several ways of doing this. 
You can get it using E-mail, ICQ, Irc or any other client/server
software. Email: If you use Ms Outlook, just click right button on your
victim's letter, choose properties>details and in that bunch of information
there is always ip addy. If you use other email clients, there is always a 
checkbox, something like "Full headers" and it needs to be checked.
ICQ : Wait till your victim sends you a message, but dont read it.
Then close all internet apps, and click start>run. Type netstat -n 1
You will see all active connections and there will be your victim's ip address.
if you cant recognize which is your victim's addy, then type just netstat 1.
[it will show you hostnames which usually lets you understand who is who]
ETC : There are many other posibilities to get ip address [physical access,
chat systems like IRC or Yahoo chat, www], just use your imagination :-)

-= TIP !!! =-
Noknok 8 ftp file manager is not ideal, so i recommend to use any well-known
ftp client [CUTE FTP or WS_FTP]. Just use ftp port 166 to connect to your
victim.

Any questions ? 
Email - webmaster@vpsoft.cjb.net
ICQ   - 13839029