DTr 1.4.2
(Backdoor.Win32.DTR.142.a)
(Backdoor.Win32.DTR.142.c for Server)
(Backdoor.Win32.DTR.14.d)

by Danil

Compressed with ASPack

Released in April 2002

Made in Ukrainia

more versions


                  DTr v.1.4
                                      
The program "DTr" v.1.4 is designed for remote administration.
The program can work both in a local area network, and through InterNet.

CAPABILITIES: the file manager, exchange of files, start of the programs, 
review all runned processes in a system, completion of selected process, 
scanning of a screen, keyboard spy, turn off / reboot, and and so on. 
( all on the remote computer - server)

FreeWare. "AS IS".                     

Before the installation it is necessary closely to read and to accept all conditions 
of the License agreements ("license.txt").

ATTENTION!!! Before start of a server part it is necessary to delete previous 
version of the program.

The server part "serv14b.exe" at the first start writes in the registry in 
HKLM\Software\Microsoft\Windows\Current Version\Run (parameter " nbsession "), 
transfers itself in the directory <WindowsSystemDir> (C:\WINDOWS\SYSTEM or 
C:\WINNT\SYSTEM32) and in future is started together with  MS Windows. 
Port by default - 10001. The port can be changed from the program (change will take 
effect at a next run of the server).

Additional library "dtrIV.dll"  is designed for execution of special 
tasks (scanning of a screen etc.). The server can work without additional DLL.
The "dtrIV.dll" file must be in the system directory (<WindowsDir> or 
<WindowsSystemDir>). Library can be downloaded to server from program. All problems 
that require the additional library are marked "(additional DLL)".
  

Server:
dropped file:
C:\WINDOWS\SYSTEM\nbsystem.exe 

size: 15 KB

port: 10001 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run 

Added:
c:\WINDOWS\SYSTEM\dtrIV.dat 
c:\WINDOWS\SYSTEM\DtrIVk.dll 

MegaSecurity