> Spyware Encyclopedia Page 45 > DeepThroat

DeepThroat removal

Spyware DeepThroat Information
Name: DeepThroat Category: RAT Author: Cold Coded in: Delphi. Compressed with NeoLite. Dangerous: Yes

DeepThroat is one of RAT spywares.
Finding it on your computer means that your computer is infected with RAT and crucial data could be endangered or even lost.

DeepThroat description by Cold:

Vendor: "Cool features - Net Get - This rules!!! gets the server to d/l a file from a web site; Port Redirect - Sp00f your ip with this (basically it acts like a proxy); Keylogger - Monitor what they type in real time" Functions: Ejecting And Closing The CD-ROM Drive Msg Box Manager Hide\Show Startbar Starts an FTP Server Capture Screen Send To URL Turn Watch On/Off Get Passwords Spawn Prog Runs a application invisibly Reboot Scan for hosts with DT server running or scan a sweeplist of hosts Ping Host Gets the system data Swap mouse buttons Forwards the mouse to the top left hand corner of the screen & keeps it there Hide desktop icons Hide start button Hide clock Hide the system tray Lists all the active & visible windows on the host Kill window Password server Change server password Remove server password Send Password to server Change wallpaper Delete file Show image Start FTP & change the ftp port Forwards the & icq page (With it is new ip) Kill the server Creates a directory on the host computer Plays a wav on the host computer Extra Irc Scanner Feature Scans for hosts that are running the server

This RAT is also known as:

•Backdoor.DeepThroat.
• Backdoor.DeepThroat.11.
• Backdoor.DeepThroat.21.
• Backdoor.DeepThroat.31.a.
• Backdoor.DeepThroat.b.
• Backdoor.DeepThroat.c.
• Backdoor.DeepThroat.h.
• Deep Throat.
• Trojan.Win32.TrojanRunner.c.
• Win32.TrojanRunner.Joiner.i.

>> Delete DeepThroat automatically - Download Spyware Doctor

DeepThroat Removal Instructions
Kill the following processes dtv3 client.exe, dtv31-lite-client.exe, remotecontrol.exe, systempatch.exe
Unregister the following DLLs and reboot confstub2.dll.
Delete these registry entries HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\systemdll32
Remove the following files amsgb.dfm, amsgb.pas, bugfixs.txt, confstub2.dll, dialup.pas, diskinfo.pas, dtv3 client.exe, dtv3.1 client.ini, dtv31-lite-client.exe, dtv31-lite-client.ini, filefind.pas, findproc.pas, ident.pas, ircclient.pas, keyspy.pas, klayouts.inc, online.pas, rascomp32.pas, ras_api32.pas, readme.html, readme.rtf, readme.txt, remotecontrol.exe, sendkeys.pas, showpictureunit.dfm, showpictureunit.pas, smart hack security.txt, stealth.pas, systempatch.dof, systempatch.dpr, systempatch.exe, systempatch.res, toolhelp32.pas, udp.dfm, udp.pas, unit1.dfm, windowlist.pas, winperf.pas, wsocket.dcu, _l0t.txt.

Bookmark DeepThroat page

Previous Spyware: Remove Deep Freeze II

Next Spyware: Remove DeepThroat 1.0