Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus downloadAnti Spyware Software
Spyware Detector - HomeSpyware Detector - PurchaseSpyware Detector - AffiliatesSpyware Detector - Download UpdatesSpyware Detector -FAQSpyware Detector -Contact Us

Home/ Spyware Encyclopedia / Backdoor.BlackHole

 Backdoor.BlackHole Technical Details
 Category Backdoor
 Discovered   5/21/2007 1:20:00 PM
 Modified   11/21/2008 2:42:32 PM
 Threat Level High
 Category Description
A Backdoor is a software program that gives an attacker unauthorized access to a machine and the means for remotely controlling the machine without the user's knowledge. A Backdoor compromises system integrity by making changes to the system that allow it to be used by the attacker for malicious purposes unknown to the user.

 Notice

Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically in our Research Lab as a result of executing Spyware Files or browsing Internet. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Software.

We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

 Summary
The following http urls were started:
• user.free2.77169.net//smgc10/ii.txt
• zhenluis.sitesled.com/ip2.txt
• www.5944.net/
The hosts file was updated with the following url-to-ip mappings:
192.168.0.101avp.com
192.168.0.101ca.com
192.168.0.101customer.symantec.com
The following internet connection was established:
221.195.42.71 : 80
200.185.126.134 : 3306
65.175.85.99 : 80

 The following Files were created:
 
NameVersionPublisherSignature (MD5)File Size (in KB)
..\FA04DA00.DLL  24002D6CF6D7F0A86C4F20320A5191FB268464
..\8C6508B6.EXE  B9C1FC38D827DEADC30CBF594F978414 
..\attribb.exe  EBBE4DBE95BC2CA7873B8123F47E401F297984
..\EGUIS.EXE  A4F7F1DDAB49E7CA15DBB33E0BC297FE4545536
..\FERTEWREYY.CPL   200
..\378DC34F.EXE  19452F468BEEF76C78B6ACBA9543CFA3650240
..\7CD3AB8F.EXE  BF3A78CC9EF31F979B999550C6410070 
..\8A61705C.EXE  AF73C4B8D19B5F6858F239C592FAA861363520
..\03DA064B.EXE  28DA4912CA3A92C93D81EB3F508F50B0160768
..\52072CCC.EXE  FA024EEDD9682AF4BF178654F027B4D9144384
..\631B9779.EXE  228903B19799F4DD77147DF3AF2DBB5E364032
..\98D16254.EXE  D7F0F1F8DBF5821B9222742D75E8C962168795
..\SVCHOTS.CFG    
..\WINFORPRQD.CPL    
..\CqMgISer.exe  1AF3177BE99B40C6EFD8793594EF464C453632
..\Fskdlfiwoe.cpl   200
..\A1201E50.EXE  55DE2EAE18AA354CD449DF3BA15B4089492544
..\619E7D35.EXE  ABBACBA43AEB2CBBFC4B4A05CF9B2AB594208
..\092C0942.EXE  E78ABFD7D0B22ADBD4B13EFA6BEA1970549888
..\CB681326.DLL  785CB85AF25CB2884082F4E0658EB862348160
..\4CEC0331.EXE  A627FD79C01DE8A7FBD6A9482BC3C882492544
..\9C838D66.EXE  BE6E447FF4FCA9ECB0E98038ACCE523E506880
..\FE371488.EXE  8E05EE661E55DF88442DC1BFB5578AEC493056
..\9A6C5F7C.EXE  53347CC10D1E71F3393BFF3F08003B94363520
..\73EA36E3.EXE  3F69DBE1EA5F97EF2B036FBAE89F1C9B139776

 The following Registry Entries were created:
 
..\System\CurrentControlSet\Services\BAT_SERVICES
..\System\CurrentControlSet\Services\systemlog
..\System\CurrentControlSet\Services\HP IDE Device
..\System\CurrentControlSet\Services\PRINT SERVER
..\System\CurrentControlSet\Services\ Browser
..\System\CurrentControlSet\Services\QQgame_helps
..\System\CurrentControlSet\Services\ASP_SERVICES
..\System\CurrentControlSet\Services\brc_services
..\System\CurrentControlSet\Services\NETMVSERVICE
..\System\CurrentControlSet\Services\NTC_Intelles
..\System\CurrentControlSet\Services\rsvpperfsles
..\System\CurrentControlSet\Services\WINDSERVICES
..\System\CurrentControlSet\Services\Windosreavpe
..\System\CurrentControlSet\Services\SERVICEERRTS
..\System\CurrentControlSet\Services\RISING PERSONAL NUMBERL SMARTUG
..\System\CurrentControlSet\Services\Remote Regi
..\Software\SCOPUS
..\System\CurrentControlSet\Services\WINFORERVICE
..\System\CurrentControlSet\Services\WORKSTATO

Recommendation to remove Backdoor.BlackHole
Spyware Detector can remove Backdoor.BlackHole, and thousands of other Spyware automatically and instantly. Click here to download Spyware Detector and scan for free.
Download Spyware Detector and Scan for FREE
 
Personalized E-mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.
Speed up your computer and increase browsing performance by deleting Spyware & Adware
Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.
Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.
 
Free Spyware Scan
 Search Threats
Testimonials

Read More
Information Desk
Spyware & Adware Categories we scan
  
List of Spyware &
Adware we remove
Submit a Threat
Submit a threat to be reviewed by our research team

Submit a Threat
Copyrights© 2003-2008 Max Secure Software. All rights reserved