|
| Name: | Back Door |
| Aliases: | N/A |
| Ports: | 1999 (port can be changed) |
| Files: | Bd200.zip - 83,334 bytes Bd201.zip - 85,646 bytes Bd202.zip - 95,768 bytes Bd203.zip - 113,466 bytes Bdpr3.zip - 112,074 bytes Backdoor2.zip - 21,447 bytes Backdoor203.zip - Trojan.zip - 23,714 bytes Trojan.zip - 31,278 bytes Backdoor.exe - 64,512 bytes Backdoor.exe - 106,496 bytes Backdoor.exe - 125,952 bytes Backdoor.exe - 233,472 bytes Backdoor.exe - 241,664 bytes Backdoor.exe - 294,912 bytes Backdoor.exe - 344,064 bytes Icqnuke.exe - 10,240 bytes Readme.exe - 55,808 bytes Readme.exe - 73,728 bytes Readme.exe - 77,824 bytes Readme.exe - 98,304 bytes Readme.exe - 102,400 bytes Notpa.exe - Grad.ocx - 199,680 bytes Comct232.ocx - 154,896 bytes Comdlg32ocx - 128,784 bytes |
| Created: | July 1998 |
| Requires: | VB 6 runtime files - are required to run the trojan. |
| Actions: | Remote Access / ICQ trojan |
| Versions: | 2.00p, 2.00, 2.01, 2.02, 2.03. (Not developed any more). |
| Registers: | HLM\Software\Microsoft\Windows\CurrentVersion\Run\ |
| Notes: | Works on Windows 95, 98 and NT. With "backdoor.c" (client) the trojan can also be run from a Unix computer. |
| Country: | N/A |
| Program: | Written in Visual Basic 6. |
 Using the Process Monitor from AATools, you will see whether any foreign
programs are running on your computer. If you find some unwanted program, you
can terminate it by clicking the 'Terminate Process' button on the Toolbar.
Using the AATools Network Monitor, you can see what ports are in use on
your local PC for connection with remote systems (LAN/Internet). On Windows
NT/2000/XP the Network Monitor will display you the services that are active on
the ports, and map the ports to their respective applications. If you register
port probes directed against ports that are normally not used, it is possible
that someone is trying to connect to a Trojan inside your network. Using the
Registry Cleaner (Startup section) from AATools, you will see
the list of programs that are registered under Run, RunOnce, RunOnceEx and
RunService registry keys. So you can find out what programs are started behind
your back. You should check these programs to see they are legitimate ones but
not Trojans programs.
0-C | D-H | I-N
| O-S | T-Z
If you have any questions or information about ports used by Trojans not
listed above, please contact us. |
