Backdoor.Nineblog is a backdoor Trojan that opens a back door on the corrupted PC. Once run, Backdoor.Nineblog creates the infected files. Backdoor.Nineblog also creates the registry entry so that it can run automatically every time the PC user starts Windows. Backdoor.Nineblog contacts the specific remote location. Backdoor.Nineblog transmits the specific information such as the Host name and the list of running processes to the remote location. Backdoor.Nineblog then opens a back door and may drop and execute other Visual Basic scripts on the corrupted PC.