Troj/Rasdoor-A

Category: Viruses and Spyware
Type: Trojan
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Rasdoor-A is a backdoor Trojan for the Windows platform.

When first run Troj/Rasdoor-A copies itself to dc.exe and creates the file backdoor.log, both in the current user's temporary folder.

The following registry entry is created to run dc.exe on startup:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
BD
<path to copy of Trojan in temporary folder>

Troj/Rasdoor-A connects to a TCP port on a remote computer. An attacker listening on this port can send commands through this connection, causing the infected computer to:

execute arbitrary commands
list processes and files
transfer and delete files
kill processes

download Try Sophos products for free
Download now