ProRat 1.4
(Backdoor.Win32.Prorat.14)
(Backdoor.Win32.Prorat.12 for down_server.exe)

by P®O Group

Released in February 2004

Made in Turkey

more versions


----------------------------------------------------------------------------------
ProRat V1.4 Version renewal and arrangements : Tuesday 24.02.2004
----------------------------------------------------------------------------------

-The reasons for preparing ProRat v1.4 for download

-Multiple Language support has been added.

-A critical bug for Keylogger has been fixed.

-A bug has been fixed for PC information.

-The Pager notification format has been changed to [PC Name]@[User Name].[Victim Name].com

-A critical security vulnerability has been fixed before been detected from anyone. This was for unauthorized people to connect to server.(thanks vesko)

-Passwords for all versions of Cute Ftp can be found now.

-Client & Server is made undetectable from AntiVirus.

-Tools menu has been added.

-The error in ProMessenger for the skin has been fixed.

-The transfer module has been optimized for making a stabile and fast transfer.

-The Online News menu has been activated again.

P®O Group


Server1:
size: 326.656 bytes

port: 5110, 5112, 51100 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{5Y99AE78-58TT-11dW-BE53-Y67078979Y} "StubPath" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run "DirectX For Microsoft® Windows" 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" 
c:\windows\system.ini, [boot] "shell" 
c:\windows\win.ini, [windows] "run"
 
dropped files:
c:\WINDOWS\SYSTEM\sservice.exe 
c:\WINDOWS\SYSTEM\winkey.dll 
c:\WINDOWS\winlogon.exe 



Server2:
down_server.exe: 
size: 2.768 bytes

MegaSecurity