TeraBIT RAT 1.2
(Not detected by KAV on October 15, 2007)

by m_reza00

Written in Visual Basic

Released in October 2007

Made in Iran

more versions

 


----------------
TeraBIT RAT v1.2
----------------
released in 05/10/2007

 + Format All Drives command included.(look Tools menu)
 + I make a installer for runtime files.(Install Runtime Files.bat)
 + Now Server auto start with windows.(too in SafeMode)
 + Now Client file run in any Windows if runtime files installed correctly.
 + Extra form GUI Improved.
 * Now sever listen on 11120,11130 ports.
 * Server file name changed to Svchoste.exe.
 * Server file continue runing commands even client file disconnect from server.
 - Some small Bugs Fixed.



Server
Dropped File:
c:\WINDOWS\system32\Svchoste.exe
Size: 40,448 bytes 

Port: 1112 TCP

Startup: 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
Old data: Explorer.exe 
New data: explorer.exe C:\WINDOWS\system32\Svchoste.exe 



tested on Windows XP
October 15, 2007

MegaSecurity