Troj/Backdr-DC is a Trojan for the Windows platform.
Troj/Backdr-DC includes functionality to:
- run automatically
- copy itself to the <System> folder
- access the internet and communicate with a remote server via HTTP
When first run Troj/Backdr-DC moves itself to <System>\ddosw.exe.
The following registry entry is created to run ddosw.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Adobes Updates
<System>\ddosw.exe