Archive A Reconstructed © MegaSecurity Database

DTr 1.4.2

Released 24 years ago. April 2002

By Danil

Informations

From	Ukrainia
Author	Danil
Family	DTr
Category	Remote Access
Version	DTr 1.4.2
Released Date	Apr 2002, 24 years ago.

Additional Information

Server:
dropped file:
C:\WINDOWS\SYSTEM\nbsystem.exe 

size: 15 KB

port: 10001 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run 

Added:
c:\WINDOWS\SYSTEM\dtrIV.dat 
c:\WINDOWS\SYSTEM\DtrIVk.dll

Author Information / Description

DTr v.1.4
                                      
The program "DTr" v.1.4 is designed for remote administration.
The program can work both in a local area network, and through InterNet.

CAPABILITIES: the file manager, exchange of files, start of the programs, 
review all runned processes in a system, completion of selected process, 
scanning of a screen, keyboard spy, turn off / reboot, and and so on. 
( all on the remote computer - server)

FreeWare. "AS IS".                     

Before the installation it is necessary closely to read and to accept all conditions 
of the License agreements ("license.txt").

ATTENTION!!! Before start of a server part it is necessary to delete previous 
version of the program.

The server part "serv14b.exe" at the first start writes in the registry in 
HKLM\Software\Microsoft\Windows\Current Version\Run (parameter " nbsession "), 
transfers itself in the directory <WindowsSystemDir> (C:\WINDOWS\SYSTEM or 
C:\WINNT\SYSTEM32) and in future is started together with  MS Windows. 
Port by default - 10001. The port can be changed from the program (change will take 
effect at a next run of the server).

Additional library "dtrIV.dll"  is designed for execution of special 
tasks (scanning of a screen etc.). The server can work without additional DLL.
The "dtrIV.dll" file must be in the system directory (<WindowsDir> or 
<WindowsSystemDir>). Library can be downloaded to server from program. All problems 
that require the additional library are marked "(additional DLL)".

This archive is an almost-complete reconstruction of the legendary Mega Security (also known as Kobayashi), a premier 90s-era "Trojan Database" where malware authors once showcased their work. After a decade offline, the site was brought back in August 2024 by its original creator, MasterRat, who authorized the Malware Gallery to host this modernized, searchable version of the collection. While the original site remains available for those seeking a nostalgic, old-school experience, we are proud to continue its legacy here. Full credit and thanks go to MasterRat and the retired Mega Security staff for their years of dedicated work in cataloging these historical samples.