 






					 [Telhack Inc]
				      [http://telhack.tk]




				           A  R  E  A
				      .::.  .::::.   .:::.
				     ::  :: ::  ::  ::
				     ::  ::    ::   ::.:::.
				     ::..::   ::    ::   ::
				      ::::   ::::::  :::::
 				      ¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨
 				      T  E  L  H  A  C  K
				 [ D O C U M E N T A T I O N ]






 Oh, you must have downloaded or might bin forced to use this software.
 Let me introduce you to it:

 Telhack Incorporated presents another remote administration tool:
 d0ped trojan, version 1.0. 3vil code by: Zeromatic. 
 Contact me at mail: 2600@Europe.com , or at Dalnet IRC; /whois Zeromatic ..

 d0ped Trojan is a client/server thing, running under any Windows9x or XP.
 The zip-file containing this textfile, also includes a setup file. 
 Install the packets, then walk through the Start/Program menu. You'll find
 a new menue called "Telhack Inc", whereunder you'll find the Client app.
 
 The server application is simply named "d0ped.exe" as default.
 As far as i know, CTRL-ALT-DEL (which - ofcourse - your'e able to disable:)
 list will display the EXE-name of the file as a running process.

 You might see this "trojan" as a later version of the "Rths"-trojan? 
 Well HECK it's not! This one is not to be controlled by any
 terminal session, it has its own client application. The d0ped Trojan
 also contain a lots of (new) amusing functions, for example:

 * Snoop on users Internet Explorer navigation
 * Edit filesystem
 * Process and hardware status
 * Constant change-of-system-wide-parameters status
 * Hide mousecursor
 * Very nice black textscreen function
 * A silly "Please Enter passwords:" function
 * Automatic search for Internet login/password
 * Desktop management
 * "Use 'Em": use the server to initiate a third session.
   (Use the target as a secound terminal).
   * Or initiate a hidden pingflood against.. anything. 
 * Desktop Management
 * Port- and Password Settings
 * A cute "incomming data"-textbox

 
 - Default port is: 1661
 - There is no password set as default.

 
 IMPORTANT: Once the server is started, the only way to stop it
 is to either turn it off using the client application, or to 
 restart the computer to DOS-mode and delete it from there.
 OBS: The server will add itself to the Run\ key in the registry,
 therefor, you'll first have to remove it using regedit or 
 msconfig, first after that, you might restart and delete the
 exe-file! (The reason you'll have to restart: The server will
 automatically restart itself if youre trying to shut it down, 
 and as the 3l1t3 people know; you cannot remove a file in use.)
 
 ___________________________________________________________________

 Required in order to run the applications:

 - VB runtimes 6
 - Some OCX-files (eventually, you'll find out which ones as youré 
 trying to start the applications). 
 - Perhaps some icons..
 
 .. and all of this is included in the setup-package that you
 find on our homepage: www.telhack.tk / www.telhack.cjb.net .
 
 And no, we cannot REALLY consider this being a trojan since
 it require a hell lots of files in order to be run.. unless 
 the "victim" has allready got them on the computer, or if he
 is using some sort of Windows 2k crap. 
 
 __________________________________________________________________
 
 There is not much more to tell the !morons.
  
 Most functions are described within the client itself.


 Remember: this is v1.0, still a beta-version! 
 So any bugreports or questions may be sent to me by mail, 
 2600@Europe.com ; or visit our HQ at irc.dal.net:7000 
 Channel: #telhack

 - Zeromatic
   Henric Dagman
   Telhack Incorporated
   www.telhack.tk				   17:38 2002-09-26

