Remacc.SAdoor

Updated:

February 13, 2007 11:36:20 AM

Type:

RemoteAccess

Version:

1.1

Risk Impact:

High

File Names:

Sadoor.exe

Systems Affected:

Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

Behavior

Remacc.SAdoor is a backdoor program that uses a covert communication channel. It monitors network traffic on the host system and carries out certain actions if it sees a certain packet.

Symptoms

Your Symantec antivirus program detects Remacc.SAdoor.

Transmission

Remacc.SAdoor is normally installed by an intruder as a backdoor to the compromised system. However it can also be used as an remote administration tool.

Antivirus Protection Dates

• Initial Rapid Release version December 29, 2003
• Latest Rapid Release version December 29, 2003
• Initial Daily Certified version December 29, 2003
• Latest Daily Certified version December 18, 2007 revision 020
• Initial Weekly Certified release date December 31, 2003