|
|
|
|
Tro.Backdoor.Remadmin.j Spyware/Adware Definition
| Name: |
Tro.Backdoor.Remadmin.j |
| Category: |
Backdoor |
| Advice: |
Remove |
| Risk: |
Severe Risk
Severe threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction and exploits are in the wild. There exists a high possibility of potential system damage or security flaw. Attacker has complete control over your computer or install new software on your machine. |
| Description:
|
Tro.Backdoor.Remadmin.j is a program used by attackers to take control of the infected machine.
Tro.Backdoor.Remadmin.j opens a backdoor on
port 4899 to allow attackers to perform various malicious activities. Tro.Backdoor.Remadmin.j also modifies the Windows hosts file to block access to security software websites/updates.
|
| Signatures:
|
process: svchost.exe: MD5 Hash: ac650a8e913d2f03f56...
process: service.exe: MD5 Hash: 0b71dba8fbbfb503fa7...
process: chkdskw.exe: MD5 Hash: 101b4c31697f6e832d7...
process: mstcpmon.exe: MD5 Hash: 681235038e1dcd1ca1a...
process: 101.exe: MD5 Hash: 0B61E3301672CCA05D2.. |
| Type: |
Backdoor - A Remote Administration Tool (RAT) is a Trojan type of software that when run, provides an attacker with the capability of remotely controlling a user's computer (victim) over the Internet. The attacker usually has full access to functions on the victim's computer. The victim's computer usually listens on the Internet for the attacker's commands. |
|
Top Backdoor Visited Pages:
Adw.BigMeanGorilla.MadAsHell
Afcore.AW
Afcore.BN
AFN
Agobot.05.c
Agobot.3.cd
Ascreen.a
ASP.Ace.f
ASP.Rootkit.10.a
Backdoor.agent
Backdoor.Aimbot.ca
Backdoor.Banger
BackDoor.Galapop.A
BackDoor.Galapop.B
Backdoor.Hupigon.lq
|
|
