Threat Database Backdoors Backdoor.RDPopen.B

Backdoor.RDPopen.B

By CagedTech in Backdoors
Published:
Last updated:

Threat Scorecard

Threat Level: 60 % (Medium)
Infected Computers: 62
First Seen: January 16, 2013
Last Seen: March 7, 2019
OS(es) Affected: Windows

The detection of Backdoor.RDPopen.B on your system indicates a potential security threat that requires immediate attention. This backdoor threat can compromise your system's security and allow unauthorized access to your data. It is essential to understand the nature of this threat and take prompt action to remove it and prevent future infections.

What Is Backdoor.RDPopen.B?

Backdoor.RDPopen.B is a type of malware that creates a backdoor on your system, allowing hackers to remotely access and control your computer. This can lead to a range of malicious activities, including data theft, installation of additional malware, and exploitation of your system's resources. The name "Backdoor.RDPopen.B" suggests that this malware may be related to Remote Desktop Protocol (RDP) vulnerabilities, but the exact nature and origins of this threat are not specified.

How Backdoor.RDPopen.B Operates

Backdoor.RDPopen.B operates by creating a covert channel of communication between your system and a command and control (C2) server controlled by the attackers. This allows the attackers to send commands to your system, steal sensitive information, and install additional malware. The malware may use various techniques to evade detection, including code obfuscation, anti-debugging, and sandbox evasion. Once installed, Backdoor.RDPopen.B can remain dormant for extended periods, waiting for instructions from the C2 server or exploiting system vulnerabilities to spread further.

Symptoms of Infection

The symptoms of a Backdoor.RDPopen.B infection can be subtle and may not be immediately apparent. However, some common indicators of a backdoor infection include unusual network activity, slow system performance, and unexplained changes to system settings or files. You may also notice that your system is behaving erratically or that your personal data is being stolen or compromised. If you suspect that your system is infected with Backdoor.RDPopen.B, it is crucial to take immediate action to remove the malware and prevent further damage.

How to Remove Backdoor.RDPopen.B

  1. Boot your system in Safe Mode with Networking to prevent the malware from loading and to allow for a clean scan.
  2. Use a reputable anti-malware tool, such as SpyHunter, to perform a full scan of your system and detect any malicious files or programs.
  3. Uninstall any suspicious programs or applications that may be related to the Backdoor.RDPopen.B infection.
  4. Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any malicious extensions or plugins.
  5. Reboot your system and perform a follow-up scan to ensure that the malware has been completely removed.

Conclusion

Removing Backdoor.RDPopen.B from your system requires a combination of technical expertise and caution. By following the steps outlined above and using reputable anti-malware tools, you can help to ensure the removal of this backdoor threat and prevent future infections. It is essential to remain vigilant and to regularly scan your system for malware to protect your personal data and prevent unauthorized access to your computer. Remember to always use strong passwords, keep your operating system and software up to date, and avoid suspicious downloads or email attachments to minimize the risk of infection.

Aliases

15 security vendors flagged this file as malicious.

Antivirus Vendor Detection
Fortinet W32/Jorik_Lethic.BBX!tr
AntiVir TR/Kazy.150630.1
Kaspersky Trojan.Win32.Jorik.Lethic.bbx
McAfee Artemis!881ED1391F6B
AVG Agent4.AIDY
Fortinet W32/Jorik_Lethic.BBR!tr
Ikarus Trojan.Win32.Jorik
AntiVir TR/Barys.971.241
Sophos Mal/Generic-S
Kaspersky Trojan.Win32.Jorik.Lethic.bbr
Avast Win32:Malware-gen
McAfee Artemis!FC75E81BCD64
AntiVir TR/Barys.2005.322
Kaspersky Trojan-Dropper.Win32.Dapato.buka
McAfee Generic.dx!bglj

SpyHunter Detects & Remove Backdoor.RDPopen.B

File System Details

Backdoor.RDPopen.B may create the following file(s):
# File Name MD5 Detections
1. StartupSlowFix.exe 29acc0d91e016a41985db5e316f380fd 18
2. aevuk.dll b1941239be584386455b97203992f80a 11
3. 1616221992012lsass.exe 2122fb72fc947e6d83c796eed4d347a6 5
4. 562822192012lsasin.exe 64d29634c003c03d41c2795cff3e011d 5
5. 25422026102012lsas82.exe d74a85d67535e7a50340b4d3cf7f8dae 4
6. 4822026102012lsas81.exe 2c1830fde0c2e788043b277b0c4bb7f1 4
7. 224391092012lsrssrs.exe 048530dda09e28b16d8e3ca9a3558561 2
8. lssasr.exe 881ed1391f6bd7e1efdb7c23d935b112 2
9. Ambfilnt.sys 1ea99df013ae45b51a5bb46c64d5966a 1
10. 0001b4ae.exe 80773feacf7a738762c31745274a57f1 1
11. 163201292012lasrrb.exe e827c4b2ba3cced11ecb7f59accc3b14 1
12. 25291725102012lsas83.exe cb6f789a660bcb9b731cd3e88f042199 1
13. 954209112012lsas87.exe b299227830dabf167856f5e436c585a9 1
14. FlasshPlayerV11.1.37.18.exe f8a97123896264751c7cc899410a6d81 1
15. 10101611112012lsas81.exe 3ad4a0162c22206d33eab460b3f72feb 1
16. 2411913112012lsax.exe 4f1e0b14ec5dec0a5d76dec46eb8e59b 1
More files