Alternative CGI Logger

· Overview ·
· Origins ·
· Distribution ·
· Operation ·
· Detection and Removal ·
· Research ·

Overview

Vendor Notes:

 From the doc: ' it looks for visitor datas it analyses the query string then it saves the datas into a php file you can choose encryption mode and keep compatility with the uncrypted logs if defined $email ==> it will send you a mail notification if defined $icq ==> it will send you an icq notification it will send a notification in case of forcing the access with wrong pass you can define a limit numer to your vic list then it will delete the older vics passing the limit you can define a limit date (days)to your vic list then it will delete the vics passing the date you can define to eliminate duplicate vics then it will delete the duplicates ip you can define to delete off line vic (need a good host) the password is encrypted now (slipk request)'

Alias:

 Backdoor.Optix.Pro.131 [Kaspersky], Backdoor/Optix.Pro.131 [Computer Associates], Bck/OptixPro.B [Panda], Win32/Optix.Pro.131 trojan [Eset]

Category:

Backdoor: A secret or undocumented means of getting into a computer system, or software that uses such a means to penetrate a system. Some software has a backdoor placed by the programmer to allow them to gain access to troubleshoot or change the program. Software that is classified as a "backdoor" is designed to exploit a vulnerability in a system, and open it to future access by an attacker.

Trojan: Any program with a hidden intent. Trojans are one of the leading causes of breaking into machines. If you pull down a program from a chat room, new group, or even from unsolicited e-mail, then the program is likely trojaned with some subversive purpose. The word Trojan can be used as a verb: To trojan a program is to add subversive functionality to an existing program. For example, a trojaned login program might be programmed to accept a certain password for any user's account that the hacker can use to log back into the system at any time. Rootkits often contain a suite of such trojaned programs.

Similar Pests:

 Backdoor · Trojan

Origins

Author:

 Roger Girardin

EMail:

 roger.girardin@caramail.com

URL:

 http://undergroundkonnekt.cjb.net/

Date of Origin:

 March, 2003

Distribution

Prevalence:
  • Alternative CGI Logger: < 0.00005%
    • More Info

    Clot Factor:
  • Alternative CGI Logger: < 1

    • The "Clot Factor" is a measure of how much a pest "gums up" a machine by adding registry entries, files, and directories. As more objects are placed in a machine, manual removal becomes more difficult and more error-prone.

    Operation

    Storage Required:
  • Alternative CGI Logger: at least 113 KB
    		•

    Detection and Removal

    Automatic Removal:

    PestPatrol detects this.

    PestPatrol removes this.

    Manual Removal:

    		 Follow these steps to remove Alternative CGI Logger from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.
    Remove Files:

    Remove these files (if present) with Windows Explorer:

    Research

    File Analyses:

    More Info:
  • AllTheWeb, AltaVista, AOL Search, Ask Jeeves, Google, HotBot, Lycos, LookSmart, MSN, Yahoo!
    		•

    Research By:
  • PestPatrol's Pest Research Center
    		•

    Last Revised:

    		 April 14, 2005