Backdoor.Nineblog Description
Backdoor.Nineblog is a backdoor Trojan that opens a back door on the corrupted PC. Once run, Backdoor.Nineblog creates the infected files. Backdoor.Nineblog also creates the registry entry so that it can run automatically every time the PC user starts Windows. Backdoor.Nineblog contacts the specific remote location. Backdoor.Nineblog transmits the specific information such as the Host name and the list of running processes to the remote location. Backdoor.Nineblog then opens a back door and may drop and execute other Visual Basic scripts on the corrupted PC.
Technical Information
Registry Details
Backdoor.Nineblog creates the following registry entry or registry entries:
RegistryKey
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft-Windows-DiskCleaner\"wscript.exe" = "%DriveLetter%\Documents and Settings\Administrator\Application Data\RECYCLER\Microsoft-Windows-DiskCleaner.vbe"
TrustScore 4.4 | See all 49 Reviews on 
Trustpilot.