Troj/Bckdr-HLO is a backdoor Trojan for the Windows platform.
The Trojan includes functionality to connect to the predefined remote site awaitng for the further remote commands.
Troj/Bckdr-HLO is a backdoor Trojan for the Windows platform.
When Troj/Bckdr-HLO is installed the following files are created:
<Temp>\winword.exe
<System>\awext32.dll
<System>\w32time.exe
The file w32time.exe is registered as a service named "W32Time" (repacing any existing services named "W32Time"). Registry entries are created or modified under:
HKLM\SYSTEM\CurrentControlSet\Services\W32Time\
The file awext32.dll is injected into the msmsgs.exe process space and includes functionality to connect to the predefined remote site awaitng for the further remote commands.