from the doc:Program: inet -- Keystroke Recorder for Post Terminal Screen and Connect To screen + mail sender with that info. Version: 2.0 (Freeware). Released: 24th February 99. Original Creator : Mandrake the MagicianDisclaimer: The author will not be responsible for anything! target machine means the machine on which the program is installed. Main features: * Once installed you get the passwords + username of the target machine by mail* Auto load at start-up.* Subsequent mail is (supposed to be) sent only when there is a change in password.* Will not be detected by any antivirus software.* Can't be seen even in the tasklist got by pressing Ctrl-Alt-DelWhere it will not work ?* On a machine running any other operating system than Win95 or Win 98.* Where they are sharing a dial-up connection using Web Ramp or similar tools.* Where they are using leased line.* Where they are using a proxy server to share a modem.(If you can get the program installed on the machine which has the modem then it might work)Introduction:inet.EXE is a Windows 95/98 freeware utility that records keystrokes on the Post Terminal Screen (the screen that comes once you connect to VSNL or any other ISP without scripting) and Connect To screen (the one that comes when you click a phone book entry of dial-up networking) It then sends the username and password if the guy uses scripting.If the victim uses the Post-Terminal Screen whatever is typed in the post terminal screen will be sent.The mail is sent automatically when the machine on which the program is installed, is connected to the internet.You have the option of setting the e-mail address (the one to which the passwords will be sent)at install time. Details are given below in the **What you need to do ?**section The program does no harm to the system as such.It will not be detected by any antivirus programs, as it is not a virus.How it works ?-------------- The program was written in Delphi 3.The main executable loads a keyboard hook when it detects the Post-Terminal Screen or Connect To screen. It saves whatever is typed in the post-terminal screen or Connect To screen of win95/98 to a file.The collected information is sent as e-mail as soon as the machine which has the program installed is connected to the internet.Once the mail is sent the progarm terminates.It gets loaded again on the next windows start-up.Mail is sent again only if there is a change in password.What you need to do ?You are reading the inet.TXT file which has instructions on installation & usage.You should not put this file on the target machine for obvious reasons.1) Run the self-extracting setup program setup.EXE. 2) You will prompted for an e-mail address,Enter the address to which the passwords will be sent. 4) Delete setup.exe to remove any traces.That's it. You can expect two e-mails if you installed the program while you were connected to the net.The first one will be without password if the user typed the password in the post terminal screen or on the Connect To screen.But the second one,which 'll be sent when the target machine connects to the net the second time.Subsequent mails are supposed to arrive only when the user has changed the passwords.Preferred Modus Operandi:(for internet booths -Hope you have read where it won't work above)Download the setup.exe from http://members.xoom.com/mmandrake.Then send this file as an attachment to your own hotmail/any mail account.There are a lot internet cafe's now who are screwing people with high charges.They are easy targets.Go to Department of Telecom's booth if at all possible.(Government's money is everyone's money :)Now go in with the pretext of checking mail at your hotmail account. Check your account which has the files.Download the attachment setup.exe and run it(as per Step1). If you used the Save to disk option while downloading,its advisable to delete it(setup.exe) before you leave the place. Check your mail (account specified in the file e) later and Presto You Have The Passwords - Always. At any time there is a change you are updated.Uninstallation:The files inet.exe,isys.dll,isys.sys gets copied to the system directory (default is C:WINDOWSSYSTEM)inet.exe and isys.dll can't be deleted directly if the program is runing.To close the program Go to the Start Menu,select Run and just type inet.exe and hit enter. Now the program gets closed and you can delete all the above mentioned files in the system directory.There are two registry entries made by the program and you can delete that also if you are familiar with the registry.The entries areHKEY LOCAL MACHINESoftwareMicrosoftWindowsCurrentVersionRunInetHKEY LOCAL MACHINESoftwareMicrosoftWindowsCurrentVersionSendOr you can use the uninstallation program at my site members.xoom.com/mmandrakeEnd Note:After reading all these long instructions you might be pretty bored.And you might perhaps have a natural question What's my benefit ? I saw guys struggling for passwords in all those password mailing lists.So I thought I'll share the program which Iam using to get passwords with others.Lets make it a free world.One last advice: Once you get the password please do not change it.It helps no one.Bye for now . You can always send comments and problems, if any, regarding this program to [email protected]
destructive program [F-Prot]Pif/Inet!PWS!Trojan [Computer Associates]PWS-CI [McAfee]Trj/PSW.Inet20 [Panda]Trj/PSW.Inet20.A [Panda]Trj/PSW.Inet20.B [Panda]Trojan.PSW.INet.20.aTrojan.PSW.INet20.a [Kaspersky]Trojan.PSW.INet20.b [Kaspersky]Win32.PSW.Inet.20 [
inet.exe
isys.dll