AmigaAnywhere

· Overview ·
· Origins ·
· Distribution ·
· Operation ·
· Detection and Removal ·
· Research ·

Overview

Vendor Notes:

 Short: View&Contr. PC or Amiga Scr. on PC w.TCP
How to use:
Amiga->PC:
PC:
Start "Anywhere.exe" on PC. Execute menucommand "Anywhere/Listen for a connection".
Amiga:
Start "Anywhere ". (Replace with the Hostname or IP-Adress from the PC.) Be sure, that the PC-Hostname is listet in the "Hosts" list. Now you should see the Amiga screen on the PC. You can control the mouse and keyboard over the network.
PC1->PC2:
PC1:
Start "Anywhere.exe" on PC1. Execute menucommand "Anywhere/Listen for a connection".
PC2:
Start "Anywhere.exe" on PC1. Execute menucommand "Anywhere/Connect to a Server", and type the Hostname of PC1.
"Anywhere" PC-Version:
----------------------
Features:
Runs on >W95 or >NT 4.0.
Send screen in 8/16/24 Bit.
8 Bit mode is compressed with special delta/runlength/huffmann encoding.
Recive screens with 8/16/24 Bit in all resolutions. (Display on remote-pc can be different!)
Missing:
None so far.....
Bugs:
Sometimes you have to activate the servermode manually. (Menu Settings/Servermode)
Commandline:
-server Start as Server. Iconified and waiting for a connection.
-comp Enable RL/Huffmann compression.
-moves Send mousemoves.
-force8 Force to send in 8 Bit mode.
-? Help
New since V0.95:
-client If a connect comes, go to client and set the remote computer to servermode.
-connect PC_Name Connect automaticly with the given computername.
History:
V0.91:
Changing refreshtime while connected didnt work.
Shutdown while connected causes errors.
V0.92:
You can now select the socketbuffer size. This is useful for slow connections like Modems.
(8192 Bytes is a good value for modem, and all above is for direct network connections)
V0.95:
Remember the Settings in .ini file.
More Performance with slow connections (Modem/Serial) ->
Restart screensending, when screen sendtime longer as refreshtime->
More accurate screenupdate.
Homepagepath in About requester.
Commandline -client and -connect added.
V0.96:
Send and recive now mouseclicks and keyboard commands while sending a screen. This gives more performance with slow connections.
V0.97:
16/24 Bit with compressing didnt work. Amiga with wrong screenmodes crashed the PC
-Client.
"Anywhere" Amiga-Version:
-------------------------
Features:
Runs only with Cybergraphics and on 8 Bit Cybergraphics screens with all Resolutions.
Runs with special delta/runlength/huffmann encoding.
Missing:
GUI.
Commandline: Hostname/A,SERVER/S
Example 1:
AnyWhere PCP_TRZILB Server
Send amiga screen to PCP_TrzilB PC.
Example 2:
AnyWhere PCP_TRZILB
Recieve PC screen on Amiga. (PC has to be in a 8 Bit mode or the "Force 8Bit" option has to be enabled!
Huffmann options can be set with PC program.
You can also "Goto Server mode" or "Goto Client mode" with the PC program. So you can change the Server/Client mode any time you want!
V0.8:
Initial release.
V0.98:
You can recive screens now!
SERVER option in commandline.
TRZIL

Category:

Backdoor: A secret or undocumented means of getting into a computer system, or software that uses such a means to penetrate a system. Some software has a backdoor placed by the programmer to allow them to gain access to troubleshoot or change the program. Software that is classified as a "backdoor" is designed to exploit a vulnerability in a system, and open it to future access by an attacker.

RAT: A Remote Administration Tool, or RAT, is a Trojan that when run, provides an attacker with the capability of remotely controlling a machine via a ""client"" in the attacker's machine, and a ""server"" in the victim's machine. Examples include Back Orifice, NetBus, SubSeven, and Hack'a'tack. What happens when a server is installed in a victim's machine depends on the capabilities of the trojan, the interests of the attacker, and whether or not control of the server is ever gained by another attacker -- who might have entirely different interests. Infections by remote administration Trojans on Windows machines are becoming as frequent as viruses. One common vector is through File and Print Sharing, when home users inadvertently open up their system to the rest of the world. If an attacker has access to the hard-drive, he/she can place the trojan in the startup folder. This will run the trojan the next time the user logs in. Another common vector is when the attacker simply e-mails the trojan to the user along with a social engineering hack that convinces the user to run it against their better judgment.

Similar Pests:

 Backdoor · RAT

Origins

Author:

 TRZIL Bernhard

Programming Language:

 Visual C++

Date of Origin:

 November, 1998

Distribution

Prevalence:
  • AmigaAnywhere: < 0.00005%
    • More Info

    Clot Factor:
  • AmigaAnywhere: < 1

    • The "Clot Factor" is a measure of how much a pest "gums up" a machine by adding registry entries, files, and directories. As more objects are placed in a machine, manual removal becomes more difficult and more error-prone.

    Countries Affected:

    		 In the past three months, we have received reports of AmigaAnywhere in United States.

    Growth:
  • AmigaAnywhere: Insufficient data to report growth
    		•

    Operation

    Default Port:

    		 3600 TCP More info about ports.

    Storage Required:
  • AmigaAnywhere: at least 129 KB
    		•

    Restart:

    		 none
    Autostarting Pests

    ScreenShot:


    AmigaAnywhere 0.97

    Detection and Removal

    Automatic Removal:

    PestPatrol detects this.

    PestPatrol removes this.

    Manual Removal:

    		 Follow these steps to remove AmigaAnywhere from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.
    Stop Running Processes:

    Kill these running processes with Task Manager:

    Remove Files:

    Remove these files (if present) with Windows Explorer:

    Research

    File Analyses:

    More Info:
  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
    		•

    Research By:
  • PestPatrol's Pest Research Center
    		•

    Last Revised:

    		 April 14, 2005