Symantec.com > Enterprise > Security Response > Backdoor.SmokeDown.B

Backdoor.SmokeDown.B

Risk Level 1: Very Low

Discovered:
May 21, 2002
Updated:
February 13, 2007 11:46:52 AM
Also Known As:
TrojanDownloader.Win32.Smokedo
Type:
Trojan Horse

Backdoor.SmokeDown.B is a Trojan horse which downloads a file from the Internet and executes it. At the time of writing, this downloaded file contained two different Backdoor Trojans.

NOTE:
  • Norton AntiVirus detects both backdoor Trojans that Backdoor.SmokeDown.B attempts to download.
  • Backdoor.SmokeDown.B was renamed from Backdoor.Omed.B



Security Response has received reports of the circulation of an email message; the message falsely claims to be from Symantec with information about this Trojan. The message appears to originate from Australia. Please note that this message is not sent by Symantec.

The message has the following characteristics.

From: "Symantec Corporation" <support@symantec.com>
Subject: Virus Hoax Warning

The body of this email message contains a slightly modified version of the Symantec Jdbgmgr.exe hoax write-up.

As the email message is being displayed, a file is downloaded in the background. This file contains the Backdoor.SmokeDown.B Trojan.

Antivirus Protection Dates

  • Initial Rapid Release version May 22, 2002
  • Latest Rapid Release version May 22, 2002
  • Initial Daily Certified version May 22, 2002
  • Latest Daily Certified version May 22, 2002
  • Initial Weekly Certified release date May 22, 2002
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: Low
Writeup By: Neal Hindocha

Search Threats

Search by name

Example: W32.Beagle.AG@mm
ThreatCon Widget
Internet Security Threat Report, Volume 16
Symantec DeepSight Screensaver