Backdoor.Poison.BU
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 60 % (Medium) |
| Infected Computers: | 121 |
| First Seen: | December 12, 2012 |
| Last Seen: | July 12, 2024 |
| OS(es) Affected: | Windows |
Your system has been detected to have Backdoor.Poison.BU, a type of malicious software that can compromise the security and integrity of your computer. It is essential to take immediate action to remove this threat and prevent any potential harm to your system and data.
Table of Contents
What Is Backdoor.Poison.BU?
Backdoor.Poison.BU is a backdoor threat, which means it is designed to allow unauthorized access to your computer system. This type of malware can be used by attackers to remotely control your system, steal sensitive information, or use your computer as a botnet to conduct malicious activities. Backdoors are often installed on a system without the user's knowledge or consent, and they can be challenging to detect and remove.
How Backdoor.Poison.BU Operates
Backdoor.Poison.BU, like other backdoor threats, operates by creating a covert communication channel between your system and a command and control (C2) server controlled by the attacker. This channel allows the attacker to send commands to your system, which can include instructions to steal data, install additional malware, or participate in distributed denial-of-service (DDoS) attacks. The backdoor can also be used to exfiltrate sensitive information, such as login credentials, financial data, or personal files.
The exact mechanisms used by Backdoor.Poison.BU to operate and communicate with its C2 server are not publicly disclosed, but it is likely that it uses common backdoor tactics, such as exploiting vulnerabilities in software or using social engineering techniques to trick users into installing the malware.
Symptoms of Infection
Identifying a backdoor infection can be challenging, as these types of malware are designed to remain stealthy and avoid detection. However, some common symptoms of a backdoor infection include unusual network activity, slow system performance, and unexplained changes to system settings or files. You may also notice that your system is behaving erratically or that you are experiencing frequent crashes or freezes.
In some cases, a backdoor infection may not exhibit any noticeable symptoms at all, which is why it is essential to regularly scan your system for malware and use robust security software to detect and prevent threats.
How to Remove Backdoor.Poison.BU
- Boot your system in Safe Mode with Networking to prevent the malware from loading and to allow you to download and install removal tools.
- Use a reputable anti-malware tool, such as SpyHunter, to perform a full scan of your system and detect and remove the Backdoor.Poison.BU malware.
- Uninstall any suspicious programs or applications that may be related to the malware infection.
- Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any malicious extensions or add-ons.
- Reboot your system and perform another full scan with your anti-malware tool to ensure that the malware has been completely removed.
Conclusion
Removing Backdoor.Poison.BU from your system requires immediate attention and careful action. By following the steps outlined above, you can help to ensure that your system is free from this malicious software and that your data and security are protected. It is also essential to take preventive measures to avoid future infections, such as keeping your operating system and software up to date, using robust security software, and being cautious when clicking on links or downloading attachments from unknown sources.
Remember that backdoor threats like Backdoor.Poison.BU can be challenging to detect and remove, and it may be necessary to seek the help of a professional if you are unsure about how to proceed. By taking proactive steps to protect your system and data, you can help to prevent the spread of malware and maintain the security and integrity of your computer.
Aliases
15 security vendors flagged this file as malicious.
| Antivirus Vendor | Detection |
|---|---|
| AhnLab-V3 | Backdoor/Win32.Pushdo |
| McAfee-GW-Edition | Heuristic.BehavesLike.Win32.Suspicious-DTR.G |
| AntiVir | TR/Dropper.Gen |
| F-Secure | Gen:Variant.Kazy.88262 |
| Symantec | Trojan.ADH.2 |
| AVG | BackDoor.Generic16.VDF |
| Ikarus | Backdoor.Win32.ZAccess |
| McAfee-GW-Edition | Artemis!068A3C7DAC13 |
| AntiVir | TR/Symmi.7841 |
| Kaspersky | Backdoor.Win32.ZAccess.ajtd |
| Symantec | Trojan.Gen.2 |
| Sophos | Sus/Scribble-B |
| eSafe | Win32.TRCrypt.EPACK |
| McAfee | Artemis!BED5861C51A2 |
| Panda | Dialer.ANF |
SpyHunter Detects & Remove Backdoor.Poison.BU
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | n. | 068a3c7dac134a9f4978cd733321424f | 33 |
| 2. | adiras.exe | 7bec9f489ccd8d3f92125025f37db961 | 16 |
| 3. | winupdate.exe | c3432c1bbdf17ebaf1e10392cf630847 | 15 |
| 4. | WebCam.exe | bed5861c51a26b5b54043df4ed09d7f0 | 12 |
| 5. | sp.DLL | 1958dc1152b4340c23736010f1987957 | 9 |
| 6. | tufymotsaneg.exe | 5d880f0a8baf90ce1916ef58ca259fe3 | 3 |
| 7. | 36731344547.exe | 7deac6c59cf40593238d9c45ce2e1794 | 1 |