DTr removal

Spyware DTr Information
Name: DTr Category: RAT Author: Danil Coded in: Visual C++. Compressed with ASPack. Dangerous: Yes

DTr is one of RAT spywares.
Finding it on your computer means that your computer is infected with RAT and crucial data could be endangered or even lost.

DTr description by Danil:

1.42: Vendor: ´The application can work both in a local area network, & via InterNet. CAPABILITIES: the file manager, exchange of any file, start of the applications, review all runned processes in a system, completion of selected process, scanning of a screen, keyboard spy, turn off / reboot, & and so on. ( all on the remote computer - server)´ 1.4.4: Vendor: ´The application ´DTr (RemoteAdmin)´ v.1.4.4 is designed for remote administration. The application can work both in a local area network, & via InterNet. CAPABILITIES: the file manager, exchange of any file, start of the applications, review all runned processes in a system, completion of selected process, scanning of a screen, keyboard spy, turn off / reboot, & and so on. ( all on the remote computer - server). Plugins.´The application "DTr (RemoteAdmin)" v.1.6 is designed for remote administration. The application can work both in a local area network, & via InterNet. CAPABILITIES: the file manager, exchange of any file, start of the applications, review all runned processes in a system, completion of selected process, scanning of a screen, keyboard spy, turn off / reboot, & and so on. ( all on the remote computer - server). Plugins. Password protection. 1st password - "dtr". Password may be changed from application.

This RAT is also known as:

•Backdoor.DTR.10.b.
• Backdoor.DTR.13.a.
• Backdoor.DTR.14.d.
• Backdoor.DTR.142.a.
• Backdoor.DTR.142.c.
• Backdoor.DTR.143.
• Backdoor.DTR.144.a.
• Backdoor.DTR.144.h.
• Backdoor.DTR.15.d.
• Backdoor.DTR.15.g.
• Backdoor.DTR.16.a.
• Backdoor.DTR.f.

>> Delete DTr automatically - Download Spyware Doctor

DTr Removal Instructions
Kill the following processes backdoor.dtr.17.exe, del_serv.exe, deldtr15.exe, dels_dtr.exe, dels_dtr17.exe, dtr1.3beta.exe, dtr1.5a_server.exe, dtr12.exe, dtr13_s.exe, dtr142.exe, dtr143.exe, dtr144.exe, dtr15.exe, dtr15f.exe, dtr16client.exe, dtr16f.exe, dtr16serverfree.exe, dtr17.exe, hd_dtr15.exe, hds_dtr.exe, klient13.exe, serv144.exe, serv15.exe, serv15f.exe, serv16fd.exe, server.exe, nb003.exe, nbsystem.exe
Unregister the following DLLs and reboot backdoor.dtr.16.d.dll, dtr.dll, dtriv.dll, nb003.dll. dtrivk.dll, dtrvk.dll in Windows\system\
Delete these registry entries HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\nbsesion HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload\nbsystem
Remove the following files backdoor.dtr.16.d.dll, backdoor.dtr.17.exe, bugs.txt, command.txt, command_ru.txt, deldtr15.exe, dels_dtr.exe, dels_dtr17.exe, del_serv.exe, dtr.cnt, dtr.dll, dtr.dpr, dtr.hlp, dtr1.3beta.exe, dtr1.5a_server.exe, dtr12.exe, dtr13_s.exe, dtr142.exe, dtr143.exe, dtr144.cnt, dtr144.exe, dtr144.hlp, dtr15.cnt, dtr15.exe, dtr15.hlp, dtr15f.exe, dtr16.ini, dtr16client.exe, dtr16f.exe, dtr16serverfree.exe, dtr17.exe, dtr17.hlp, dtriv.dll, dtr_dll.txt, faq.txt, hds_dtr.exe, hd_dtr15.exe, klient13.exe, license.txt, license_eng.txt, nb003.dll, readme.txt, readme_eng.txt, rxconst.pas, rxgconst.pas, rxgif.pas, rxgraph.pas, serv144.exe, serv15.exe, serv15f.exe, serv16fd.exe, server.exe, web-hack.txt, whatsnew.txt, whatsnew_eng.txt. dtriv.dat, dtrivk.dll, dtrv.dat, dtrvk.dll, nb003.exe, nbsystem.exe in Windows\system\

Bookmark DTr page

Previous Spyware: Remove Dtprintnfo exploit

Next Spyware: Remove DTr 1.0