by Mr. Nop
Written in Microsoft Visual C++, server compressed with ASPack
Released in May 2000
Gip: README
=================================
Features:
Sends full information about system
Work on Windows 95/98/2000/NT
Sends passwords to your E-mail
The Size is 21kb
Get dial-up passwords with ISP Phone numbers, ip's and DNS too
Get passwords from Icq99a/Icq99b/2000a ( If you have any information about crypting passwords in
icq98a say me)
Get passwords from edit boxes
Get passwords from EDialer
Auto Send mails every X days
Auto-update, so victim always have the newest version =)
Attachs to any file (including documents)
Deletes itself from infected file
Whats New:
1.13 21/05/2000
1. Now size of server is 21 kb
2.Get IP and DNS
3.Get passwords from EDialer
4.Full support for icq2000
5.Bug fix in GipWizard and GIP
Whats New:
1.12 13/05/2000
1.Bug fix in GipWizard
2.Bug fix in GIP
Whats New:
1.11 9/05/2000
1.Icq2000 support
2.AVP not detect
3.Added 3 SMTP server (Total 6)
4.TimeScan
5.UpdateDir
6.Added Gip Wizard (ConfigGUI)
7.Now you can change icon(only NT/2k)
Whats New:
1.10 build 1033 5/05/2000
1.Bug fix in config.exe
2.AVP not detect
3.Bug fix with -PIN
1.10 25/04/2000
Bug fix in config.exe
Can be attached to document, not only .exe file.
Auto-Update
Deleting itself from infected file
Fixed bug with date
Crypting the core of trojan (don't laugh ;-) )
PIN
1.08 11/04/2000
Bug with running trojan from WinZip
Get cached icq99b passwords
Get country and city phone code
Send information about the system
Send number of sent mails
How to use:
1. Place Email key in config.ini with your e-mail
2. Place Smtphost key with anonimous smtp (if you dont know such smtp, dont worry -
there are 3 predefined servers)
3. Copy file you are going to send to victim to folder with trojan
4. Run config.exe -a <Gip Server> <program for infecting>
e.g. config.exe -a gipsvr108.exe yourprogram.exe
5. Get configured trojan from folder TrojanHere
6. If you dont like standard icon, change it with resource editor, e.g. Microangelo
(DONT ask us where to find it! Try to search yourself on www.altavista.com)
Warning!!
If you download the update for your anti-virus and it sees GIP, *URGENTLY*
contact us with the name of the anti-virus and update date.
Comments and suggestions are WELCOME!
Contacts:
Mr.Nop uin: 10957787
Official web site: http://xbx.rial.net/gip/
MegaSecurity