Backdoor.DMSpammer

Printer Friendly Page

Discovered: October 28, 2003
Updated: October 30, 2003 5:12:44 PM
Systems Affected: Windows

Backdoor.DMSpammer is a trojan program that allows a compromised system to be used as an SMTP relay.


Technical Description

Backdoor.DMSpammer is a trojan program that allows a compromised system to be used as an SMTP relay, possibly in order to relay spam messages.

When the trojan is installed, it typically creates the following copy of itself:
C:\Program Files\Common Files\MSDM\msdm.exe

Once the relay is running, it will accept SMTP relaying on a port specified by the remote attacker.