Name: Daodan Category: RAT Alias: Backdoor.Daodan.123, Backdoor.Daodan.124, Backdoor.Delf.bi Advice: Remove Risk: Elevated Risk Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge. Description: Signatures: process: iplook.exe: MD5 Hash: f10b0641a7551f2368e... process: ¦+¦¦+¿+-.exe: MD5 Hash: 3781093318d48a4ddb3... process: ¦¦-f-+-+.exe: MD5 Hash: 9a2cd9af7cebaad6c47... process: ¦+¦¦+¿+-1.23.exe: MD5 Hash: fa2810f57f9da68840d... process: ¦¦-f-+-+.exe: MD5 Hash: 115e1f049aa84166211... process: ª+ªª+++-ªsª¦ªÿ.exe: MD5 Hash: 350317139b94bbd38d6... process: ¦+¦¦+¿+-1.24.exe: MD5 Hash: c336b7986136efa106c... process: ¦¦-f-+-+.exe: MD5 Hash: aad5966ebca23781223... process: winrundll.exe: MD5 Hash: .. Type: RAT - A Remote Administration Tool (RAT) is a Trojan type of software that when run, provides an attacker with the capability of remotely controlling a user's computer (victim) over the Internet. The attacker usually has full access to functions on the victim's computer. The victim's computer usually listens on the Internet for the attacker's commands.