P2P/Red Swoosh

Alias: Red Swoosh

Description: A Remote Administration Tool, designed for illegal access to victim's computer. Simple but effective hacker tool. This version is used for remotely controlling machines (illegally of course). The principle of a RAT program is quite simple: the intruder infects the machine with a "server" program via the e-mail or File and Print Sharing system and can control it, using a "client" on his computer. Some RAT programs can be judged as a simple hooliganism, but some can seriously damage your system, or be the main cause of valuable information loss. The program needs 1281 kb place for storage. It was created in December 2002.

Threat type:

P2P - P2P is any peer-to-peer file swapping program. The following software applications are typical examples: Audiogalaxy, Bearshare, Blubster, E-Mule, Gnucleus, Grokster, Imesh, KaZaa, KaZaa Lite, Limewire, Morpheus, Shareaza, WinMX, Xolox, etc. P2P software may pose security issues because outsiders are granted access to you files. P2P can degrade network performance, consume vast amounts of storage and be bundled with adware and/or spyware programs.

Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer and / or to protect your privacy.

Detection:
SpyNoMore removes P2P/Red Swoosh: Yes

Threat risk: High Risk

Very dangerous malware. Can log user's keyboard activity and take snapshots of the user's screen. Uses stealth installation and removal is very difficult. Category includes spyware programs, adware programs and trojans.

Symptoms:

P2P/Red Swoosh Signature Details: The following information includes some of the standard signatures associated with this spyware threat. Please do not attempt to manually remove these items from your computer; Removing these items incorrectly or partially can cause your computer to experience critical errors, prevent your computer from restarting or cause loss of Internet connectivity. Should you be infected with P2P/Red Swoosh, you can clean your computer by downloading SpyNoMore now.

Running Process Signatures:
N/A

File Signatures:
N/A

Registered Dll (Dynamic Link Library) Signatures:
N/A

Folder Signatures:
%PROGRAM_FILES%\rsnet

Registry Signatures:
N/A

SpyNoMore Collected Residual File Signatures:
N/A

See Also:
Backdoor/WinCrash.a
Backdoor/Netbus.153
Key Logger/Banker.j
Key Logger/Small.z
Trojan/BHO/Homepage Hijacker/StartPage.GV
Trojan/Win32.Banker.j
Trojan/Banker
Hacker Tool/IllNotifier.20
Hacker Tool/Nawai.a
Flooder/MailSpam.VB.k