Remove ProAgent. Description and removal instructions

Title: ProAgent
Type: Remote Administration Tools	Severity scale: (60 / 100)

A Remote Administration Tool is a special kind of hacker spyware, used for remote access and control of other people's computers. The attacker infects the PC via the e-mail or File and Print Sharing. A "server" allows him to connect via a "client" on his own machine. The functions of a RAT may vary, depending on the needs of the hacker. Some RATs can't really harm your PC and the only purpose they were made for is hooliganism. But some versions can steal vital information, delete files and even crash your system. This RAT also features a "password capture" ability. Several versions (ProAgent 1.0, ProAgent 1.1, ProAgent 1.2, ProAgent 1.21, ProAgent 2.2) appeared in the internet from July 2003 to October 2003. The author is a Turkish hacker called ATmaCA. He wrote this pest in C++ programming language.

From the publisher:

"What's new
-----------------------------------
'+' = New feature
'-' = Bug fixed or Removed
'*' = Improved or Changed
-----------------------------------
===================================
Version 1.2
16/7/03
===================================
+ Added support for MS Outlook passwords. (POP3 accounts only)
+ Added support for Eudora passwords.
+ Added support for MSN Explorer passwords.
+ Added support for AutoComplete passwords in Internet Explorer
+ Added support for Password-protected sites in Internet Explorer
+ Added property "screenshoot quality" manual
+ Added property "Melt server on install" manual
+ Added property "Upx unpack" manual
+ Added property "Fake error message" manual
+ Added property "Interval(delay) in seconds between data sending retries" manual
- Fix the bug "When server startup,automaticly run outlook express to recovery passwords"
- Fix the bug "Driver_32 error on win9x"
===================================
Version 1.1
2/6/03
===================================
+ Added support for Icq2003a/Lite Passwords.
===================================
Version 1.0
7/2/03
===================================
Just first release.
===================================
ATmaCA"

FORUM:
Discuss ProAgent in
spyware removal forum

ProAgent properties:
• Allows remote user connection
• Logs keystrokes
• Hides from the user
• Stays resident in background

Automatic ProAgent removal:

remover for ProAgent

ProAgent manual removal:

Kill processes:
proagent.exe, server.exe

HELP:
how to kill malicious processes

Unregister DLLs:
binaryyaz.dll, img32.dll, join.dll

HELP:
how to unregister malicious DLLs

Delete files:
binaryyaz.dll, img32.dll, join.dll, proagent.exe, server.exe, t_m.com, unit1.dfm, unit1.pas, whatsnew.txt, yardim.rtf

HELP:
how to remove harmful files

Other programs to remove ProAgent:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 23/04/05
Information updated: 03/08/08

Additional resources related to ProAgent:

Attention: If you know or you have a website or page about ProAgent removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about ProAgent parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.