Hacktool.ShadowAdmin

Updated:

February 13, 2007 11:39:06 AM

Type:

Hack Tool

Risk Impact:

High

File Names:

SA.exe,SASrv.exe; varies.

Systems Affected:

Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

Behavior

Hacktool.ShadowAdmin is a hack tool that copies privileges from one account to another account. It can be used to give Administrator privileges to unauthorized users.

Symptoms

None

Antivirus Protection Dates

• Initial Rapid Release version August 20, 2004
• Latest Rapid Release version September 26, 2011 revision 036
• Initial Daily Certified version August 20, 2004
• Latest Daily Certified version September 27, 2011 revision 002
• Initial Weekly Certified release date August 25, 2004