Threat Database Backdoors Backdoor.Poisonivy.P

Backdoor.Poisonivy.P

By CagedTech in Backdoors
Published:
Last updated:

Threat Scorecard

Threat Level: 60 % (Medium)
Infected Computers: 454
First Seen: September 14, 2011
Last Seen: December 3, 2023
OS(es) Affected: Windows

Your system has been detected with a threat known as Backdoor.Poisonivy.P, which indicates the presence of a backdoor-type malware. This type of malware is designed to allow unauthorized access to your computer system, potentially leading to further malicious activities such as data theft, installation of additional malware, or use of your system for malicious purposes like spamming or launching attacks on other systems.

What Is Backdoor.Poisonivy.P?

Backdoor.Poisonivy.P is identified as a backdoor threat, which means it is capable of bypassing normal security mechanisms to allow remote access to your computer. Backdoors are typically installed without the user's knowledge or consent and can be used for a variety of malicious purposes. The name itself does not directly indicate a specific malware family but suggests its backdoor capabilities.

How Backdoor.Poisonivy.P Operates

Backdoor malware like Backdoor.Poisonivy.P operates by creating a secret channel of communication between your computer and a remote server controlled by the attacker. This channel can be used to send commands to your computer, steal data, or install additional malware. The operation of backdoor malware can be stealthy, making it difficult for users to detect without proper security software.

These malware types often exploit vulnerabilities in software or use social engineering tactics to gain initial access to a system. Once installed, they can remain dormant until activated by the attacker, making them particularly dangerous as they can be used at any time to compromise the security of the infected system.

Symptoms of Infection

Symptoms of a Backdoor.Poisonivy.P infection can be subtle and may not always be immediately apparent. Common indicators of a backdoor infection include unusual network activity, slow system performance, unexpected changes to system settings, or the presence of unknown programs. However, backdoors are designed to be stealthy, and many infections occur without any noticeable symptoms, highlighting the importance of regular system scans and updates.

How to Remove Backdoor.Poisonivy.P

  1. Boot your computer into Safe Mode with Networking to limit the malware's ability to interfere with the removal process.
  2. Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter, to detect and remove all traces of the malware.
  3. Uninstall suspicious programs that you do not recognize or that were installed around the time the malware was detected.
  4. Reset your web browsers (Chrome, Firefox, Edge, etc.) to their default settings to remove any malicious extensions or settings changes made by the malware.
  5. After completing the above steps, reboot your computer and then perform another scan to ensure that the malware has been completely removed.

Conclusion

Removing Backdoor.Poisonivy.P requires careful attention to detail and the use of proper removal tools. It is essential to act quickly to prevent further damage to your system or data. Regularly updating your operating system, software, and security programs can help protect against future infections. Additionally, practicing safe computing habits, such as avoiding suspicious downloads and emails, can significantly reduce the risk of malware infections.

Aliases

15 security vendors flagged this file as malicious.

Antivirus Vendor Detection
Sophos Sus/BancDl-A
AntiVir PCK/Enigma
Comodo Heur.Pck.Enigma
BitDefender Gen:Trojan.Heur.FU.iUW@aafE48lG
McAfee Artemis!39FA8000F85C
GData NSIS:Downloader-SZ
Avast NSIS:Downloader-SZ [Trj]
McAfee Artemis!C7C3319B2CE8
Sunbelt Trojan.Win32.Ircbot!cobra (v)
McAfee-GW-Edition Trojan.Downloader.Gen
AntiVir TR/Downloader.Gen
BitDefender Generic.Malware.SIMdldg.7F6622D6
F-Prot W32/Heuristic-257!Eldorado
NOD32 probably a variant of Win32/Genetik
McAfee New Malware.b

File System Details

Backdoor.Poisonivy.P may create the following file(s):
# File Name MD5 Detections
1. calc.exe b1ba46c7da0ff9f123e0515e81525ca5 137
2. TCPIE.dll daea21c8f64476c7011872cf6a767dc5 72
3. wmprfESP.dll 1b4b37869a2a4766890498732e957ad0 7
4. bm.exe b3b0b0562eab28899baf8f5752651dd9 7
5. skdfhiosjhf.exe bb73f331a45fbb50cc1ee92945b95c50 6
6. server.exe 555401d8727eb4d00e8c540d0cfdfff3 4
7. aadrive32.exe 7604adfb4217f6aa387c93292c2a4d13 4
8. arking.exe 685b314dc4f2533ad6f641ee46d3631d 3
9. xservicesx1.exe dd96edaacb449df5d069b720fa390fcd 1
10. ircphate.exe 225b5eb2b35b7785b05ecdfbbdba7f64 1
11. wtsx.exe 39fa8000f85c638bb648d578eeca05de 1
12. pdwa.exe c7c3319b2ce8bfd0ea5133b6d926dae0 1
13. azroles32.dll 040defb448cf6b49c666b79891c1d858 1
14. admparsen.exe 324b47162dacecb73b1e6750fadb30ec 1