Troj/Icedoor-A is a backdoor Trojan for the Windows platform.
Troj/Icedoor-A connects to the internet and tries to establish contact with and download code from several preconfigured locations as well as opening up a backdoor port on the infected computer.
Troj/Icedoor-A copies itself to the Windows system folder and creates the following registry entries to run itself automatically at log on:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
asvhost.exe
asvhost.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\
asvhost.exe
asvhost.exe
Troj/Icedoor-A also creates a number of other registry entries beneath the main entry
HKCR\CLSID\
{FBB13C90-29C0-4233-B967-BB6DE54FE92A}
Troj/Icedoor-A creates a text file in the Windows system folder named "port.txt" which contains the hexadecimal port number of the backdoor it has opened.