Threat Database Backdoors Backdoor.Win32.LolBot.iq

Backdoor.Win32.LolBot.iq

By ZulaZuza in Backdoors

Backdoor.Win32.LolBot.iq is a Trojan that puts the affected computer at risk, because Backdoor.Win32.LolBot.iq paves the way for more malware and more attacks. Given the current malware climate, Backdoor.Win32.LolBot.iq is generally more likely to be used in order to download other malware onto the computer, e.g., rogue security applications, but Backdoor.Win32.LolBot.iq is not limited to that kind of use.

What this Trojan is, and What It Can be Used For

As the name indicates, Backdoor.Win32.LolBot.iq is classified as a backdoor. This means that generally, Backdoor.Win32.LolBot.iq is used to create access to the infected computer, which serves the main purpose of the creator of the Trojan. Not only can Backdoor.Win32.LolBot.iq be used to download malware, but Backdoor.Win32.LolBot.iq can also be used to download anything, for that matter. Alternatively, Backdoor.Win32.LolBot.iq can be used to give someone remote access to the affected system, leaving open the possibility for information theft.

So, Backdoor.Win32.LolBot.iq is not an end in itself. Backdoor.Win32.LolBot.iq is a means to an end, and the reason that is concerning is that whatever that end is, it's going to be something worse than this Trojan. Backdoor.Win32.LolBot.iq is only a gateway, or a delivery mechanism. Depending on the needs and intentions of a particular hacker, Backdoor.Win32.LolBot.iq can be tweaked so that it supports a variety of attacks and threats.

Accordingly, Backdoor.Win32.LolBot.iq is meant to go completely unnoticed by the user of the infected computer, and so Backdoor.Win32.LolBot.iq hides itself in the System folders, often in the Application Data subfolder. Backdoor.Win32.LolBot.iq then uses a svchost.exe process, set to run automatically when Windows starts, to take care of running the backdoor from that location. Since Windows will always have several instances of svchost.exe running under normal circumstances (since each one of them actually supports something else), another instance of svchost is not that conspicuous.

Variations on this particular Trojan have been on the Internet for a while, but a new variety seems to have appeared in the middle of February 2011; therefore, there may be an increase in the rate of infection with Backdoor.Win32.LolBot.iq.

Trending

Most Viewed

Loading...