Written in Visual C++

Released in april 2000

more versions

Email password sender
(ras and cache) passwords
includes  phone number, ip address,
dns address, win address, etc...

New in v2.1
   - server size 16.5 kb;
   - auto save password "Connect To" dialog; 
   - check "Run" registry if infected user delete
     the trojan startup  
     check every (exitwindows-reboot-shutdown)
     then if(delete==true) 
     then disable registry editor;
   - changeable icon
   - and fix some bugs....


Server:
C:\WINDOWS\SYSTEM\WCheckUp.exe 

size: 17 KB

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "WCheckUp"