Archive A Reconstructed © MegaSecurity Database

WinGate

Released 26 years, 3 months ago. January 2000

By Loveless

Informations

Author	Loveless
Family	WinGate
Category	Stealth Proxy
Version	WinGate
Released Date	Jan 2000, 26 years, 3 months ago.
Language	Visual C++, compressed with UPX

Additional Information

Server:
size: 349.696 bytes

port: 1080, 1081, 1082, 1083, 2080, 808 TCP

Author Information / Description

WINGATE "TROJAN-READY" (tm) Loveless 15-Jan-2000 (or 1900 if you like)
----------------------------------------------------------------------

A complete kit to install onto trojanized 95/98 machine.


Files: 

mmtask.exe		wingate 3.09 engine itself. packed with upx.
settings.reg		registry settings for wingate and vmload.
vmload.vxd		a vxd which spawns wingate at boot time.
regedit.exe		Windows95 regedit. adds anything to the
			registry without asking.

Installation:

1. Copy mmtask.exe and vmload.vxd into %WINDIR%\SYSTEM
   Copy regedit.exe into %WINDIR%
   Copy settings.reg into any place.

   example:
   C:\WINDOWS\SYSTEM\MMTASK.EXE
   C:\WINDOWS\SYSTEM\VMLOAD.VXD
   C:\WINDOWS\REGEDIT.EXE
   C:\WINDOWS\SETTINGS.REG

   Click on the settings.reg so it can be sucked into the registry.
   Delete settings.reg to avoid any traces. :)

2. Reboot/nuke the machine. After it restarts, Wingate will activate.

Thats it!

Features:

+ Logging is disabled
+ IP check is disabled
+ Password for Gatekeeper is "1"
+ Ports which Wingate listens at: 
  socks..............1080
  telnet.............1081
  http proxy.........1082
  ftp................1083
  winsock redirect...2080
  gatekeeper..........808

+ Because Wingate is called via vxd, it doesnt appear in typical
  places like RunServicesOnce (abused by most lame backdoors).
  For average American citizen who has bought his computer for birthday,
  it will take 5-10 years to discover what the fuck is going on :)


Greets to: 

Yaworsky and Badman Forever...... for their idea of calling programs (DD)
                                  via vmldr.vxd
Electra.......................... for hints about Wingate and trojanizing
                                  a computer of some American lesbian. :)
Ferz............................. for plenty of "Ministry of Sound" tracks.


Future versions: Its much better to put all stuff in self-installing package,
so it can copy the files and create registry keys automatically. However,
monsters like InstallShield and Wise arent good for this.
If you know a good *small* installer without GUI - drop me a line please!


Loveless

This archive is an almost-complete reconstruction of the legendary Mega Security (also known as Kobayashi), a premier 90s-era "Trojan Database" where malware authors once showcased their work. After a decade offline, the site was brought back in August 2024 by its original creator, MasterRat, who authorized the Malware Gallery to host this modernized, searchable version of the collection. While the original site remains available for those seeking a nostalgic, old-school experience, we are proud to continue its legacy here. Full credit and thanks go to MasterRat and the retired Mega Security staff for their years of dedicated work in cataloging these historical samples.