BKDR_VB.GBX

This backdoor may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.

It drops copies of itself. It then executes the dropped copy.

It creates registry entries to enable its automatic execution at every system startup.

It modifies registry key(s)/entry(ies) as part of its installation routine.

It opens a random port to allow a remote user to connect to the affected system. Once a successful connection is established, the remote user executes commands on the affected system.

Related Items