Name: Stukach (Ñòóêà÷)
Version: -
Author: unknown
Language: C++
Packed: not packed
| | Server | Editor |
|---|---|---|
| Icon | ||
| Name | agent.bin | StukSt.exe |
| Size | 49152 (04.12.1999) | 189952 (04.12.1999) |
| KAV detected | Trojan.PSW.Rit | Trojan.PSW.Rit |
Editor:
Warning:
Default configured e-mail is jellok@beer.com
Features:
Stukach is a tiny little programm, which can run hiddenly on some computer, keeping track of everything user types on the keyboard, and sending this information to you via e-mail. Of course, user never would know you are reading his e-mail and stuff, unless you would say him.
This software package consists of two parts: Stukach-Agent and Stukach-Station. To run the Station, execute the file "StukSt.exe". You will see the setup dialog with some simple, such as your å-mail address, etc. After you specify them, click the "Create Trojan" button. Station would compile your trojan (using "agent.bin" file) and create output file on a desktop. Run it and enjoy.
Note: Accessing other people personal information without their permission is against the law! Violators wiil be prosecuted! See "Licence Agreement" section for more information.
*** BORING HELP STUFF
"Your e-mail address", "Your SMTP server" - Use this to configure Agent mail. If you are using some free mail system, this would sounds like "yourname@mailserver.com" for address and "smtp.mailserver.com" or "mail.mailserver.com" for server. You should read the server's documentation to find out their SMTP server exactly.
"Show message", "Title", "Body" - With this group of controls you can setup a message box that will popup after Agent's installation on the remote computer. Click an exclamation mark to test, how would your message box looks like.
"Run any EXE", "File to extract and start" - use this if you want to run some programm after Agent's installation. This file will be attached to your output file. When executed, this programm will display your message box (see "Show Message"), extract and start your EXE, and then install itself in the system.
"Create Trojan" button - Click here to write an output file with your setups saved. Stukach Station would open the "AGENT.BIN" file, write new defaults to it, attach your EXE, and save everything to file you specify ("RunMe.exe" by default).
"Advanced" button - Click it to setup the following:
"Value for run key" - Value for registry key to keep Agent's path and filename in "Software\ Microsoft\ Windows\ CurrentVersion\ Run". You can write whatever you want here, it does not matter at all. (Try "BlahBlahBlah").
"Value for storing text", "Value for number of lines", "Value for handle", "Value for counter" - all this does not matter at all. Type something (but something not very short to avoid conflicts with other data).
"Look for connection each" - How many seconds to wait between attempts to send mail. Agent will try to send mail periodically when in "pregnant" state.
"Send mail when have more than XXX lines of text" - How many lines of text to keep. After the limit has been reached, Agent will switch to the "pregnant" state.
"And at least once per day" - If checked, Agent will go in "pregnant" state on each computer startup. Use this if you want to get mail at least once per remote computer session (if it connects to internet during this session, of course).
"Registry path for data" - Path in registry to keep captured text and other data (see "Value for storing text" and other controls). Agent can NOT create a registry key, so you have to specify an existed (in any Win95) directory.
"Registry path for RUN" - By default, this value is "Software\ Microsoft\ Windows\ CurrentVersion\ Run". You can try to switch it to "...\RunServices" or other key of this group - but always test Agent first.
"Filename to copy agent into" - where to keep Agent's executable on the remote computer.
"File to extract the attachment to" - path to extract and run the attached EXE. Use any file in "Temp" directory.
"Header" - this is header for the mail you will get. Edit it to change subject, sender or receiver name and so on. Never forget to add a couple of newlines ("\n") at the end of this text.
*** AGENT UNINSTALLATION
Click Start, Run, and type "regedit" in the small textbox provided. Press Enter. In the tree control on your left choose "HKEY_LOCAL_MACHINE", then "SOFTWARE", then "Microsoft", then "Windows", then "CurrentVersion", then "Run". Find the "SysReq" value (if you didn't change it during the Stukach Station setup). Delete this value. Reboot.
