BKDR_SMALL.AXV

This memory-resident backdoor is either downloaded from the Internet or dropped by the malware detected by Trend Micro as TROJ_DROPPER.BFK.

When executed, it searches the Windows folder for the possibly malicious file, SVCHOST.EXE, that is dropped by another malware. If found, this backdoor then executes the said file. Note that the executed file uses the file name of a legitimate Windows file located in the Windows system folder.

It may be used by other malware applications to open a random port and allow a remote malicious user to perform several commands on the affected system. This routine compromises system security and opens the affected machine to further attacks.

Related Items