Database : BackOrifice.Trojan
BackOrifice.Trojan
Virus Name: BackOrifice.Trojan
Aliases: None known
Type: Win32 Backdoor Trojan
Resident: Yes
Stealth: No
Trigger: None
Payload:

None

Comments:

This is a software for remote computer control. It consists of two components - a server program and a client program. There are two types of client - command line driven and GUI. When the server program is run on a Windows95/98 machine, it copies itself to the local disk under the name " .exe" (first character is space, size is 124928 bytes) and installes a reference to that file in the registry so that it is run every time the machine restarts. The program hides its own presense - it is not visible as a task although it is running permanently in the background awaiting for commands comming from the client through the network. After the server program is installed on a computer, the person controlling the client has remote control over the machine running the server program. This requires both machines to be connected to the Internet. This control includes recording the keystrokes pressed, restarting or hanging the machine, running, accessing, modifying and transferring files. It can also transmit screenshots.

Copyright © 2001, All Rights Reserved.
Created & Maintained by VQUEST.