Pages

Showing posts with label Backdoor Server. Show all posts
Showing posts with label Backdoor Server. Show all posts

Monday, November 2, 2009

BDS/Glecia.D - Backdoor Server

General
Method of propagation:
• No own spreading routine
Aliases:
• Kaspersky: Packed.Win32.Krap.x
• F-Secure: Packed.Win32.Krap.x
• Eset: Win32/Kryptik.AWF
Platforms / OS:
• Windows 2000
• Windows XP
• Windows 2003

Side effects:
• Drops malicious files
• Registry modification

Files
– %SYSDIR%\sys.dat Furthermore it gets executed after it was fully created. Further investigation pointed out that this file is malware, too. Detected as: BDS/Glecia.A