Threat Database Backdoors Backdoor.Graybird.T

Backdoor.Graybird.T

Backdoor.Graybird.T is a malicious backdoor program that can surreptitiously enter a users computer system. Once inside a system, Backdoor.Graybird.T will create a backdoor into the compromised machine, giving remote attackers unauthorized access and control over the machine. Backdoor.Graybird.T will also disable the Remote Procedure Call (RCP) service of an infected computer.

Registry Details

Backdoor.Graybird.T may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services \RpcSs\"ImagePath" = "%SystemRoot%\system32\svchost.exe -k rpcss"
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services \GrayPigeonServer

Trending

Most Viewed

Loading...