Backdoor.Aoi - Spyware Detector - Max Secure Software

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home/ Spyware Encyclopedia / Backdoor.Aoi

Backdoor.Aoi Technical Details

Category

Backdoor

Discovered

7/26/2007 4:05:00 PM

Modified

12/13/2007 5:39:00 PM

Threat Level

Medium

Description

A Backdoor is a software program that gives an attacker unauthorized access to a machine and the means for remotely controlling the machine without the user's knowledge. A Backdoor compromises system integrity by making changes to the system that allow it to be used by the attacker for malicious purposes unknown to the user.

Summary

The hosts file was updated with the following url-to-ip mappings: n/a
The following http urls were started: n/a
Generated smtp traffic:
email sender:
*prorat@yahoo.com
Connection(s) established with remote IRC Server: n/a
The following hidden entries created: n/a
The following internet connection was established:
65.54.244.104:25(mx4.hotmail.com)
196.206.147.228:41100(adsl196-228-147-206-196.adsl196-5.iam.net.ma)
68.178.211.72:21(winhostecn72.prod.mesa1.secureserver.net)

When the Backdoor is executed, it creates the following files:

Name	Version	Publisher	Signature (MD5)	File Size (in Bytes)
..\slgdubwd.dll			06a3702550c8e935baa01a845a0bec0a	131072
..\prgwjoqd\jfouelpk.dll			06a3702550c8e935baa01a845a0bec0a	131072
..\vetijare\nkzyxchk.dll			7ac9363b002994ccab40ea2b3b690ca9	47104
..\ie_updates3r.exe			d03a9e41050ca9f911cf966e2882fe5b
..\temp\1435859.exe			A85C79AFF7C55E53F0EDA1EAB56E99FD
..\p423ck.exe			deca0512a0d6b8dd72e9a076d7ae7eda	42496
..\48b9168c.exe			4e83345b9cce03c9fb04e1d639d43cfd	428032
..\d1221ec4.exe			4f9bcde7274992ef83b0f77473070eb8	424143
..\drvval.dll			f4ee79fa5906fd0b55a44c77328a4086	104448
..\drvvalr.dll			3d512c90feea4aede5939009d11e57e5	15360
..\vgfddwtv\vgfddwtv1.exe			c1e80688e243e0bae82cca360dd8a41a	149848
..\vgfddwtv\vgfddwtv2.exe			c73f9d519db212fc529c9543d2dd9e63	160600
..\vgfddwtv\vgfddwtv3.exe			38af0d301efeb75cb456cb6cdabf1a4a	149848
..\wintjv32.dll			1006bb23a0ebf0660362ba6a49cf82d8	20992

When the Backdoor is executed, it creates the following Registry entries:

•	..\software\classes\clsid\{16975c1e-950b-f58a-b187-08ed8f89a6b0}

Recommendation to remove Backdoor.Aoi

Spyware Detector can remove Backdoor.Aoi, and thousands of other Spyware definitions, automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.

	Speed up your computer and increase browsing performance by deleting Spyware & Adware

	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.

	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Search Threats

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat