Beer


· Overview ·
· Origins ·
· Operation ·
· Detection and Removal ·
· Research ·



Overview

Summary:

Type of tcp bomber.

Alias:

DoS.ICMP.Beer [Kaspersky], DoS/Beer [Panda], DoS-IcmpBeer [McAfee], FDoS-Beer [McAfee], Nuker.Win32.Beer [Kaspersky], security risk or a "backdoor" program [F-Prot], Win32/DoS.ICMP.Beer trojan [Eset], Win32/Nuker.Beer trojan [Eset]

Category:

Flooder: A program that overloads a connection by any mechanism, such as fast pinging, causing a DoS attack.

DoS: An exploit whose purpose is to deny somebody the use of the service: namely to crash or hang a program or the entire system. Examples of DoS attacks include flooding the victim with more traffic than can be handled; flooding a service (like IRC) with more events than it can handle bomb; crashing a TCP/IP stack by sending corrupt packets; crashing a service by interacting with it in an unexpected way; or hanging a system by causing it to go into an infinite loop. For example, the Ping of Death exploit crashed machines by sending illegally fragmented packets at a victim. A common word for DoS is ""nuke"", which was first popularized by the WinNuke program.

Nuker: A program that disables a machine through damage to the registry, key files, the file system, etc.

Trojan: Any program with a hidden intent. Trojans are one of the leading causes of breaking into machines. If you pull down a program from a chat room, new group, or even from unsolicited e-mail, then the program is likely trojaned with some subversive purpose. The word Trojan can be used as a verb: To trojan a program is to add subversive functionality to an existing program. For example, a trojaned login program might be programmed to accept a certain password for any user's account that the hacker can use to log back into the system at any time. Rootkits often contain a suite of such trojaned programs.

Similar Pests:

Flooder · DoS · Nuker · Trojan

Origins

Author:

The Milk Man

Date of Origin:

March, 1998

Operation

Storage Required:

  • Beer: at least 313 KB
  • Detection and Removal

    Automatic Removal:

    PestPatrol detects this.

    PestPatrol removes this.



    Manual Removal:

    Follow these steps to remove Beer from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.
    Stop Running Processes:

    Kill these running processes with Task Manager:

    Remove Files:

    Remove these files (if present) with Windows Explorer:

    Research

    File Analyses:

    More Info:

  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
  • Research By:

  • PestPatrol's Pest Research Center
  • Last Revised:

    March 03, 2005