Backdoor.Win32.MoSucker.30.av
Backdoor.Win32.MoSucker.30.av is a Windows platform backdoor Trojan that gives remote attackers access to victims' systems. Backdoor.Win32.MoSucker.30.av connects with a remote server via HTTP, and allows unauthorized users to control and steal confidential information from an infected PC. Backdoor.Win32.MoSucker.30.av can also download other malware onto a system. Backdoor.Win32.MoSucker.30.av avoids detection by disabling certain security applications and modifying the Hosts file to block all access to computer security websites.
Aliases
1 security vendors flagged this file as malicious.
| Anti-Virus Software | Detection |
|---|---|
| - | Win-Trojan/Mosucker.163840.E |
Registry Details
Backdoor.Win32.MoSucker.30.av may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSWinsock.Winsock.1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\1.0]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\1.0\HELPDIR]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSWinsock.Winsock]
