Overview
Category:
Backdoor: A secret or undocumented means of getting into a computer system, or software that uses such a means to penetrate a system. Some software has a backdoor placed by the programmer to allow them to gain access to troubleshoot or change the program. Software that is classified as a "backdoor" is designed to exploit a vulnerability in a system, and open it to future access by an attacker.
Variants:
Similar Pests:
Origins
Date of Origin:
Distribution
Prevalence:
Clot Factor:
The "Clot Factor" is a measure of how much a pest "gums up" a machine by adding registry entries, files, and directories. As more objects are placed in a machine, manual removal becomes more difficult and more error-prone.
Growth:
Operation
Storage Required:
Detection and Removal
Automatic Removal:
PestPatrol detects this.
PestPatrol removes this.
Manual Removal:
Kill these running processes with Task Manager:
Go To the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run.
If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\aqadcup, delete it and reboot the machine immediately.
Unregister these DLLs with Regsvr32, then reboot:
Remove these registry items (if present) with RegEdit:
Remove these files (if present) with Windows Explorer:
Research
File Analyses:
- Backdoor.Agent.a: 39b59ea7.exe
- Backdoor.Agent.b: 2d8734c2.exe
- Backdoor.Agent.bc: wstart.dll
- Backdoor.Agent.bg: aqadcup.exe
- Backdoor.Agent.d: b43a782e.dll
- Backdoor.Agent.h: 21f51744.exe
- Backdoor.Agent.i: backdoor.agent.l.exe · f5ac2742.exe
- Backdoor.Agent.j: backdoor.agent.j.exe · flux.exe · readme.txt · unpacked.exe
- Backdoor.Agent.m: backdoor.agent.m.exe