Backdoor.LV

Backdoor.LV is a dangerous malware infection that contains certain characteristics that have caught the attention of PC security researchers. While this malware threat had been around before May of 2012, this month saw a sudden increase in attacks involving the Backdoor.LV infection. This Trojan infection uses an executable file (with the EXE extension) to attack a computer. Backdoor.LV is downloaded from an IP that is located in Kuwait. However, Backdoor.LV can be downloaded from a variety of servers in various countries. The main purpose of the Backdoor.LV infection is to spy on the victim and steal personal information about the infected computer. If you feel that your computer has been exposed to Backdoor.LV, ESG malware analysts advise analyzing your computer with an effective anti-malware application.

Some Characteristics About Backdoor.LV that Make It Stand Out

One interesting aspect of Backdoor.LV is that Backdoor.LV uses domains that are related to the Middle East in some way. In fact, the countries where Backdoor.LV-related malware is hosted are mostly concentrated in the Middle East. One other aspect that PC security analysts have noticed is the way Backdoor.LV malware communicates with its Command and Control server. Backdoor.LV uses a custom protocol in order to send and receive instructions, meaning that Backdoor.LV is more difficult to intercept and detect. Like many other backdoor Trojans, Backdoor.LV uses port 80 to send out and receive its instructions.

How Backdoor.LV Attacks Your Computer

The main role of Backdoor.LV is to gather information about the infected computer. Then Backdoor.LV relays this information to a command and control server, using the custom protocol mentioned above. The information the Backdoor.LV gathers include the NetBIOS name, the user name, the current date, where the infected computer is located and the version of the infected computer's Windows operating system. There are also various versions of Backdoor.LV malware, which change slightly how Backdoor.LV communicates to its Command and Control server. The Backdoor.LV Trojan also sends out encoded information, which contains the infected computer's current activity. This information is usually quite basic; Backdoor.LV will detect whenever a window is open on the infected computer and Backdoor.LV will send the title in the window's title bar to a remote server. This means that Backdoor.LV effectively communicates what the person operating the infected computer is doing, and what websites are being visited.

SpyHunter Detects & Remove Backdoor.LV