ProRat 1.2
(Backdoor.Win32.Prorat.12)

by P®O Group

Released in January 2004

Made in Turkey

more versions


----------------------------------------------------------------------------------
ProRat V1.2 Version renewal and arrangements : Wednesday 20.01.2004
----------------------------------------------------------------------------------

-The reasons for preparing ProRat v1.2 for download

Server, downloader server has been modified for getting undetectable from AntiVirus and firewalls. 

4 different menus has being added to Extras.
 
Stabilization has being made on server and client.

P®O Group


Server:
dropped files:
c:\WINDOWS\SYSTEM\sservice.exe 
c:\WINDOWS\SYSTEM32\fservice.exe 
c:\WINDOWS\SYSTEM\winkey.dll 

port: 5110, 5112, 51100 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{5Y99AE78-58TT-11dW-BE53-Y67078979Y} "StubPath" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run "DirectX For Microsoft® Windows" 
c:\windows\system.ini, [boot] "shell" 
c:\windows\win.ini, [windows] "run" 


MegaSecurity