Netministrator (1.0)
Server name: Netministrator 
Version: 1.0
Different versions: None
Tested: Yes, on Windows 95 and Windows NT
Server size: 159K
Server files: NetminS.exe
Server icon:

Infects: Windows 95/98/ME/NT/2000
Autoloads: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ Key: Netministrator
Default port: 9000 TCP
Can port be changed: Yes

Server Features

  • Capture screen 
  • Change wallpaper 
  • Chat with server 
  • Close or hide running programs 
  • Closer server 
  • Download file 
  • Eject Cd-Rom 
  • Execute file (invisibly or normally) 
  • FTP server 
  • Get server info 
  • Hang up modem 
  • Key logger 
  • Lock clipboard 
  • Lock mouse 
  • Open URL 
  • Play wav file 
  • Record sound 
  • Send text to clipboard 
  • Set server options 
  • Show message 
  • Show/Hide desktop icons 
  • Show/Hide mouse cursor 
  • Show/Hide start button 
  • Show/Hide task bar 
  • Shutdown, restart or logoff windows 
  • Start screen saver 
  • Swap mouse buttons 
  • Update server 

 
Comments 
NetMinistrator 1.0 is a demo version. The real version costs about $35 dollars. The registered version allows the server to be ran invisibly. Probably no one actually would purchase this because any trojan such as Deep Throat has the same features. The demo version has a little tray icon so, you should know if you are infected.

How To Remove 
Quick fix: no quick fix programs
Manual removal:

  1. Remove the Netministrator key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run  Which can be done with regedit or any other registry editing program. 
  2. Reboot the computer or close the file listed in the registry.
  3. Delete the trojan file listed in the registry. 

 
Related 
Article: General removal info
Section: Test your knowledge, take our Trojan Quiz
Service: Trojan removal
Service: Tell a friend about this trojan
Service: Print this page
 
 
Copyright © 2000 and 2001, Dark Eclipse Software. All rights reserved. 
This page may not be redistributed or reproduced in any manner without specific written permission from Dark Eclipse Software. If permission to use this page is desired then contact Dark Eclipse Software. While we consider the content of this page to be accurate, we cannot guarantee either the accuracy or the appropriateness of any portion of the page, including our analysis and manual removal. 
Any actions taken by a reader in response to this or any other Dark Eclipse Software page are completely and solely their responsibility.