Backdoor.Bancodor - Spyware Detector

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home/ Spyware Encyclopedia / Backdoor.Bancodor

Backdoor.Bancodor Technical Details

Category

Backdoor

Discovered

5/28/2007 10:26:00 AM

Modified

10/30/2007 10:22:00 AM

Threat Level

Medium

Description

A Backdoor is a software program that gives an attacker unauthorized access to a machine and the means for remotely controlling the machine without the user's knowledge. A Backdoor compromises system integrity by making changes to the system that allow it to be used by the attacker for malicious purposes unknown to the user.

Summary

The hosts file was updated with the following url-to-ip mappings: n/a
The following http urls were started: n/a
Generated smtp traffic: n/a
Connection(s) established with remote IRC Server: n/a
The following hidden entries created: n/a
The following internet connection was established:
192.168.94.1:2282

When the Backdoor is executed, it creates the following files:

Name	Version	Publisher	Signature (MD5)	File Size (in Bytes)
..\081b31d5.dll			2C6173A07F6197C43F992CEA84B3CC46	4096
..\087243d7.exe			D46871215FF5FB3C91738A7DF705672D	1312
..\0d64168a.exe			874AD75EADD4EEA41B906DC8A9A0A089	518656
..\1c10ac50.exe			0424AC0D36E79C1A981121BA5654F238	194560
..\31304be7.exe			0CBC29670E10BB9A383C6EB591859098	194560
..\3eb78599.exe			04CDD73A46125BD7B831B0114DA5CC82	518656
..\413360d8.dll			452E2102310C4969CFA4476F31D0C3B3	31596
..\530f4877.exe			0C768BA218931C3F9C8E7C30C6218A4C	231936
..\67f21f06.dll			2BE1148BF53E980E089203602305D2BE	60331
..\698af5a0.exe			2471847DD80929459F21F2CE2893DAFE	482816
..\6cbbdabe.exe			31738BA719C42DCF2D7CD1378FEA27C2	446976
..\96aa3fe7.exe			101C10BD3BEBF515F4B403F9ED1059C7	98304
..\a19270d9.exe			2D474DD3D48D9DC932C4F743053BF1D3	74900
..\b1bd8f4a.dll			6C09ACAC0F267203B0DF87479E022E85	4096
..\b34c4900.exe			1E60BB8759751DBB86CAB6068F58F1F9	94288
..\b93bd8ba.exe			4B651DA6CC68F6011C27462365D575F7	210944
..\ba04eaf6.exe			35C9B32061DF4F3F7A02916E3B136BB4	206878
..\65b439fa.exe			d10c577af3fe88282f6a639de319d8a8	481792
..\c7a8955c.exe			3006D0FAA86E87B5F9428D3EF84F1339	660992
..\dc93c4ca.exe			CD5C7EDB0A1A697CD7B8762B5969E357	379812
..\df4e385a.exe			9E6FE6E7C6A1883FA8A50B3BE4A6172D	511488
..\dfe83333.exe			2BBFD8117970C21898165D48E96FE017	40688
..\fc3820bb.exe			4DE8FA2A84FBE43E32A7DCB2FE5AA32E	206848
..\e33f5fd5.dll			1eb57155a03ad2c71e79b5970057137a	11776
..\48be32c6.exe	1.0.0.0	Home	8c8b95bfb506842d1d556ae10b81de98	81538

When the Backdoor is executed, it creates the following Registry entries:

•	..\software\microsoft\windows\currentversion\run\"ietool"
•	..\software\microsoft\windows\currentversion\run\"kpyfsrv32"
•	..\software\microsoft\windows\currentversion\run\"yhwxsrv32"

Recommendation to remove Backdoor.Bancodor

Spyware Detector can remove Backdoor.Bancodor, and thousands of other Spyware definitions, automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.

	Speed up your computer and increase browsing performance by deleting Spyware & Adware

	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.

	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Search Threats

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat