Remove Drat

Posted on November 3rd, 2010 in Common Technique by admin

What is Drat as well as dismissal instructions

A RAT module functions by a elementary though in effect principle: a hacker infects a appurtenance with a “server” module around a e-mail or File as well as Print Sharing complement as well as can carry out it, regulating a “client” upon his computer. Originated in Sep 2001. The functions of a RAT can vary, depending upon a needs of a attacker. Variants of this harassment appeared in a internet from Jan 1999 to Sep 2001. The fad place is Russia. The programming denunciation is Visual C . It was combined by Derat AKA DaRat a Hacker AKA DaRaTTy.

From a publisher:

“DRaT 1.0: from a doc:
As supposing a DRaT setup Util is so u can shift a encoded Password as well as UIN. The DRaT_FileGui is so u can operate a record transferring options. It contingency be run upon your box as well as it used pier 50. The categorical DRaT Trojan itself uses Port 48 as well as to bond to it u operate telnet as if u were joining to a normal server solely u operate pier 48.
There for regulating a begin run options sort telnet. When it comes up regulating Connect -> Remote System come in a IP as well as shift a Port to 48. That’s all u need to do to bond to a DRaT server. If u have been using it upon your box to fool around will it will repudiate loopback ( 127.0.0.1 ) so u will have to operate a network IP or supplement a dial up adapter as well as allot a IP. This was implemented to have it tough to mislay if a user is a lamer. DaRaT”

Drat primer removal:
Kill processes:

drat setup util.exe, drat.exe, dratfile_gui.exe, [system, root]shell32.exe
Delete registry values:
HKEY_CLASSES_ROOTauthidentauthident pass
Unregister DLLs:
[system root]systemcbj.dll

Delete files:
drat setup util.exe, drat a worlds idealisation practical spy.doc, drat.exe, drat_comp.header, dratfile_gui.exe, [system root]init_asm.bin, [system root]shell32.exe, [system root]systemcbj.dll


Article Source: レジストリクリーナー

Post a comment