Discovered: September 10, 2002
Updated: February 13, 2007 11:40:23 AM
Also Known As: Backdoor.RCServ.c [AVP]
Type: Trojan Horse
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
Backdoor.RCServ is a Backdoor Trojan Horse that gives a hacker unauthorized access to an infected computer. By default, this Trojan opens port 4128 on a compromised computer.
Backdoor.RCServ is a Delphi application.
Depending on the variant, Backdoor.RCServ is packed with UPX v1.20, UPX, Aspack, or WWPack. The packed file size is 150 KB to 230 KB; the unpacked file size is 450 KB to 500 KB.
Protection
-
Initial Rapid Release version September 10, 2002
-
Latest Rapid Release version June 22, 2009 revision 066
-
Initial Daily Certified version September 10, 2002
-
Latest Daily Certified version June 19, 2009 revision 051
-
Initial Weekly Certified release date September 11, 2002
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
-
Wild Level: Low
-
Number of Infections: 0 - 49
-
Number of Sites: 0 - 2
-
Geographical Distribution: Low
-
Threat Containment: Easy
-
Removal: Moderate
Damage
Distribution
Writeup By: Serghei Sevcenco