WinGate

Released 24 years, 8 months ago. January 2000

By Loveless

Informations

Author	Loveless
Family	WinGate
Category	Stealth Proxy
Version	WinGate
Released Date	Jan 2000, 24 years, 8 months ago.
Language	Visual C++, compressed with UPX

Additional Information

Server:
size: 349.696 bytes

port: 1080, 1081, 1082, 1083, 2080, 808 TCP

Author Information / Description

WINGATE "TROJAN-READY" (tm) Loveless 15-Jan-2000 (or 1900 if you like)
----------------------------------------------------------------------

A complete kit to install onto trojanized 95/98 machine.


Files: 

mmtask.exe		wingate 3.09 engine itself. packed with upx.
settings.reg		registry settings for wingate and vmload.
vmload.vxd		a vxd which spawns wingate at boot time.
regedit.exe		Windows95 regedit. adds anything to the
			registry without asking.

Installation:

1. Copy mmtask.exe and vmload.vxd into %WINDIR%\SYSTEM
   Copy regedit.exe into %WINDIR%
   Copy settings.reg into any place.

   example:
   C:\WINDOWS\SYSTEM\MMTASK.EXE
   C:\WINDOWS\SYSTEM\VMLOAD.VXD
   C:\WINDOWS\REGEDIT.EXE
   C:\WINDOWS\SETTINGS.REG

   Click on the settings.reg so it can be sucked into the registry.
   Delete settings.reg to avoid any traces. :)

2. Reboot/nuke the machine. After it restarts, Wingate will activate.

Thats it!

Features:

+ Logging is disabled
+ IP check is disabled
+ Password for Gatekeeper is "1"
+ Ports which Wingate listens at: 
  socks..............1080
  telnet.............1081
  http proxy.........1082
  ftp................1083
  winsock redirect...2080
  gatekeeper..........808

+ Because Wingate is called via vxd, it doesnt appear in typical
  places like RunServicesOnce (abused by most lame backdoors).
  For average American citizen who has bought his computer for birthday,
  it will take 5-10 years to discover what the fuck is going on :)


Greets to: 

Yaworsky and Badman Forever...... for their idea of calling programs (DD)
                                  via vmldr.vxd
Electra.......................... for hints about Wingate and trojanizing
                                  a computer of some American lesbian. :)
Ferz............................. for plenty of "Ministry of Sound" tracks.


Future versions: Its much better to put all stuff in self-installing package,
so it can copy the files and create registry keys automatically. However,
monsters like InstallShield and Wise arent good for this.
If you know a good *small* installer without GUI - drop me a line please!


Loveless