Dumador.IK
| Dumador.IK |
Destructivity:  Spreading: Overall risk:
|
| • Detected by virus detection files published: 8/11/2005 | • Type: Backdoor |
| • Virus characteristics first published: 8/11/2005 | • Spreading mechanism: Other |
| • Virus characteristics latest update: 11/28/2005 | • Overall risk: Medium |
| • Alias: Dumador.DG, Win32.Bambo, W32/Dumador.AG@bd, W32/Dumador.J-bdr, BKDR_DUMADOR.AX, Backdoor.Nibu | • Payload: Keylogger |
| Virus type |
Spreading mechanism |
Destructivity and payload |
Additional descriptions |
Detection and removal |
||||||||||
|
Dumador.IK will attempt to send keystrokes, and other sensitive information back to the virus author. This backdoor will specifically target the Windows clipboard, and the protected storage area of the registry, which contains auto-complete data for IE. Also, Dumador.IK attempts to steal information from browser Windows with the following strings in their title:
The backdoor also attempts to prevent access to certain AV vendors sites, by appending the following entries to the \drivers\etc\hosts file:
Dumador.IK contains multiple backdoors, which listen on ports 9125 and 64972.
|
||||||||||||||