
WinNT/2K/XP STEALTHER UTILITY v1.02
-----------------------------------

When executed on target machine (system or administrator rights required),
this program will copy itself to %SystemDirectory% as RPCXSS.EXE,
and create/start itself as system service.
This service will perform the following actions:

1. Stealth RPCX* files in the:

   - taskmanager
   - system service manager
   - findfirst/findnext
   - registry

2. Stealth in netstat by port 31337, TCP/UDP

3. Each second this service will check for new RPCX*.EXE files
   in the %SystemRoot%\system32\ (except RPCXSS.EXE itself),
   and execute them under SYSTEM privileges, once per session.

As such, to execute stealth processes on the target machine, you only
need to start there this program (dont forget to delete original file),
and then to put your own programs as RPCX*.EXE files into system32 directory.

3. Command line parameters

    /yo         passphrase, used to install/uninstall,
                otherwise will work only as auto-executed service

    /report     show user name; then
                show ++ if installed,
                show -- if uninstalled,
                or E1..E12 if error


KNOWN BUGS:

  v1.02
  - registry/netstat stealth doesnt works in NT4,
    file stealth works partially in NT4
