Remove Drat. Description and removal instructions

Title: Drat
Type: Remote Administration Tools	Severity scale: (57 / 100)

A RAT program works by a simple but effective principle: the hacker infects the machine with a "server" program via the e-mail or File and Print Sharing system and can control it, using a "client" on his computer. Originated in September 2001. The functions of a RAT can vary, depending on the needs of the attacker. Variants of this pest appeared in the internet from January 1999 to September 2001. The origination place is Russia. The programming language is Visual C++. It was created by Derat AKA DaRat the Hacker AKA DaRaTTy.

From the publisher:

"DRaT 1.0: from the doc:
As provided the DRaT setup Util is so u can change the encoded Password and UIN. The DRaT_FileGui is so u can use the file transferring options. It must be run on your box and it used port 50. The main DRaT Trojan itself uses Port 48 and to connect to it u use telnet as if u were connecting to a normal server except u use port 48.
There for using the start run options type telnet. When it comes up using Connect -> Remote System enter the IP and change the Port to 48. ThatÃ†s all u need to do to connect to the DRaT server. If u are running it on your box to play will it will deny loopback ( 127.0.0.1 ) so u will have to use a network IP or add a dial up adapter and assign a IP. This was implemented to make it hard to remove if the user is a lamer. DaRaT"

FORUM:
Discuss Drat in
spyware removal forum

Drat properties:
• Allows remote user connection
• Hides from the user
• Stays resident in background

Automatic Drat removal:

remover for Drat

Drat manual removal:

Kill processes:
drat setup util.exe, drat.exe, dratfile_gui.exe, [system, root]\\shell32.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CLASSES_ROOT\authident\authident key

HELP:
how to remove registry entries

Unregister DLLs:
[system root]\\system\\cbj.dll

HELP:
how to unregister malicious DLLs

Delete files:
drat setup util.exe, drat the worlds ultimate virtual spy.doc, drat.exe, drat_comp.header, dratfile_gui.exe, [system root]\\init_asm.bin, [system root]\\shell32.exe, [system root]\\system\\cbj.dll

HELP:
how to remove harmful files

Other programs to remove Drat:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 19/03/05
Information updated: 19/03/05

Additional resources related to Drat:

Attention: If you know or you have a website or page about Drat removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Drat parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.