ProRat 1.0b-3
(Backdoor.Win32.Prorat.10.c for Server)
(Trojan-Dropper.Win32.Agent.xf for join.dll)
(Backdoor.Win32.Prorat.10.g for plugins.dll)

by P®O Group

Released in June 2003

Made in Turkey

more versions 




Client:
port: 29888 TCP


Server:
dropped files:
c:\WINDOWS\SYSTEM\LOADER.EXE 
c:\WINDOWS\SYSTEM\MSMSG.EXE 

size: 239.325 bytes

port: 22311, 58343 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{6EF52A52-394A-11d3-B153-00707897TY} "StubPath" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "MSNMESENGER"
MegaSecurity