BKDR_JAVAWAR.JG

BKDR_JAVAWAR.JG is a backdoor Java Trojan infection that targets HTTP servers with a Java-based platform. BKDR_JAVAWAR.JG is a malicious JSP file (Java Server Page file) which allows criminals to gain backdoor access to the infected server. A backdoor is a term that PC security researchers use to refer to malware that grants unauthorized access to a computer by criminals, much like an unguarded backdoor allows a robber to gain access to an unguarded building. One of the reasons why malware like BKDR_JAVAWAR.JG is especially dangerous is because of its ability to attack servers, endangering all computers connected to websites and pages hosted on the infected server. BKDR_JAVAWAR.JG allows criminals to carry out malicious commands on the infected computer, bypassing its defenses by taking advantage of known vulnerabilities in the Java platform.

The BKDR_JAVAWAR.JG file and other JSP files are web pages that require a specific kind of server with a particular kind of Java servlet. Once BKDR_JAVAWAR.JG is deployed from the infected web server, a criminal can gain access to the infected server from a remote location. BKDR_JAVAWAR.JG can be used to browse, modify, and delete files on the infected computer. Using BKDR_JAVAWAR.JG, criminals can also download and upload files to and from the infected server. The functionality achieved by using this Java-based backdoor is similar to what is carried out by other non-Java based backdoor Trojans. BKDR_JAVAWAR.JG can usually be installed by a secondary malware infection known as a Trojan dropper. BKDR_JAVAWAR.JG can target the most common versions of Windows being distributed today, including Windows 2000, Windows Server 2003 and the three most popular home versions of this operating system.

Protecting a Server from a BKDR_JAVAWAR.JG Attack

In fact, most BKDR_JAVAWAR.JG infections may come from poorly secured systems. BKDR_JAVAWAR.JG may be installed directly on the infected web server by taking advantage of the web consoles used by Java servlets associated with servers vulnerable to BKDR_JAVAWAR.JG. If the targeted computer is not protected with a strong password, criminals may use a password cracker to generate the password via a brute force attack. Because of this, ESG security researchers strongly advise administrators to ensure that their Web servers are fully protected with strong passwords composed of long strings, multiple characters and – ideally – redundant authentication procedures.

SpyHunter Detects & Remove BKDR_JAVAWAR.JG