Well, it seems after someone sent me this screen shot:


and asked me if I wanted to check it out. Knowing this person I'm like sure, I will check it out.

after tring to use the program without sucess and errors I sent it to Mold, one of the staff members at piehax0r. He checked it out with his hex editor and found a few things out.

The program pretends to disconnect you from AOL and comes up with a prompt to enter your username and password.

here is a hex screen shot:


after doing so, it sends your username and password to an email address ( its encrypted so can't find out whos email it is )

then it changes your autoexec.bat and messes up your programs such as graal, icq, irc ect.


So this is basically a ISP account stealer. Since I don't have a dial-up internet account or windows 95/98/me I was not affected by this programs wrath.

just thought everyone would like to know.

bigs thanks goes to Mold for this one.