Remove ProRAT. Description and removal instructions

Title: ProRAT
Type: Remote Administration Tools	Severity scale: (60 / 100)

This is a Remote Administration Tool that is used by hackers to control the victim's machine remotely. The possibilities of such programs depend on the needs of the attacker. The attacker infects the PC via the e-mail or File and Print Sharing. A "server" allows him to connect via a "client" on his own machine. The functions of a RAT may vary, depending on the needs of the hacker. Some RATs can't really harm your PC and the only purpose they were made for is hooliganism. But some versions can steal vital information, delete files and even crash your system. Several versions appeared in the internet from May 2003 to August 2004. This program was written in Delphi programming language and compressed with UPX. This RAT affects such operating systems as Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP and Windows Me. But users of Macintosh, OS/2, UNIX and Linux are immune to this threat.

From the publisher:

"1- Before using ProRat v1.4 please read the help file. You can reach to the help file by pressing on the ô?ö sign which is just on the top of the ProRat v1.4 client. As you will see there is enough information there for use and solving your problems.

2- All kind of user problems with ProRat v1.4 are discussed in http://www.cehennem.com/?sayfa=forum&gorev=forumdisplay&forumid=22 All questions about ProRat v1.4 are answered only in 1 topic, before writing to the form we suggest you to read the help file once more and if you cant find the answer in the help file write it to the form correctly with details so we can solve the problem properly. We donÆt answer any kind of questions like ôwhy cant i connect to the server what should I do?ö

3- You cannot start ProRat directly in a zip file first you must unzip and then you can start the client. This is not a error this is just made to work ProRat properly.

4- To connect to a PC with ProRat client the server should have a direct connection to internet. If its a PC in network and has a ¦P address like ô192.168.0.* or if its behind a Router and has a ¦P like ô10.*.*.* you will be unable to connect with ProRat and this kind of situation is also valid for other kind Trojans. If you will use ProRat in you own local network this is possible and i wont matter if the ¦P address is starting with 192.168.*.* , You can use and connect to any PC you offer.

5- ProRat will not send any keylogg files or any passwords to your email address. ProRat is a "ProHack.Net Remote Administrator Tool v1.4" you can only get the keylogg files and passwords you want to learn by connect to the victims PC.

6- You can connect to all PC in your country and other countryÆs as well. If the victim is connected to internet this will be enough

7- If you cant connect to a victim this doesnÆt mean that you cannot connect to all victims. Please try new victims and you will see that it will connect. If you still cant connect to a victim after trying few times read the help file and try to find where you are making a mistake and feel free to ask us questions if you still have problems.

8- If your or your victims PC is being forced to closing after you started ProRat server or ProMessenger this is not ProRat v1.4 fault because some kind of worm virus like msblast can infiltrate to PC which doesnÆt have security patches. ProRat will close the Firewall (optional) and this will give a chance to this kind of worms to infiltrate and close systems. To take measures please read the help file and you will see links to download patch files.

9- if you try to make ProRat server undetectable to AntiVirus the ProRat will not connect to the server. If you want a server which is undetectable from AntiVirus you must buy ProRat v1.5 Special Edition, For more information please get in contact with sale@prohack.net. If you didnÆt try to change server and you still get a connection reject message, possibly the server wasnÆt installed properly to the victims PC

10- Please attach importance to the Online News on you client. You will find important messages and news about ProRat and ProGroup. Sometimes Online news would not work and this does not mean it wont work forever. Try few days later because during updates and server problems it could be closed."

FORUM:
Discuss ProRAT in
spyware removal forum

ProRAT properties:
• Allows remote user connection
• Hides from the user
• Stays resident in background

Automatic ProRAT removal:

remover for ProRAT

ProRAT manual removal:

Kill processes:
client.exe, down_server.exe, prorat.exe, prorat_client.exe, server.exe

HELP:
how to kill malicious processes

Unregister DLLs:
img32.dll, join.dll, plugins.dll

HELP:
how to unregister malicious DLLs

Delete files:
client.exe, down_server.exe, duzenlemeler_&_eklentiler.txt, img32.dll, join.dll, mutlaka_okuyun.txt, plugins.dll, prorat.exe, prorat_client.exe, readme.txt, server.exe, t_m.com, tool.com, versiyon_yenilikleri.txt

HELP:
how to remove harmful files

Other programs to remove ProRAT:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 23/04/05
Information updated: 23/04/05

Additional resources related to ProRAT:

Attention: If you know or you have a website or page about ProRAT removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about ProRAT parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.