Troj/Bckdr-PNN is a backdoor Trojan which allows a remote intruder to gain access and control over the computer.
When run Troj/Bckdr-PNN creates the following files:
<System>\msxml12.dll - this file can be deleted
<System>\tdll.dll - detected as Troj/Bckdr-PNN
<System>\webvw32.dll - detected as Troj/Bckdr-PNN
Registry entries are created under the following entry to run Troj/Bckdr-PNN on startup:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Webvw32
Troj/Bckdr-PNN includes functionality to:
- download code from the internet and run them
- act as a proxy redirecting internet traffic