Home Malware Programs Trojans Backdoor.Agent.SA

Backdoor.Agent.SA

Posted: May 26, 2010

Backdoor.Agent.SA is a Trojan that uses known vulnerabilities to spread across existing networks. Backdoor.Agent.SA will open ports on a computer allowing hackers unauthorized access to an infected PC. Once Backdoor.Agent.SA is active all sorts of problems may occur on the system, including the entire system crashing. Use a reliable malware remover to terminate Backdoor.Agent.SA immediately.

Aliases

Backdoor.Win32.Agent.mo (Kaspersky Lab)
W32/Sdbot.worm.gen.by (McAfee)
W32/Sdbot-ABQ (Sophos)
packed with PE_Patch (Kaspersky Lab)

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole]HKEY..\..\..\..{RegistryKeys}[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa][HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\ServiceCurrent][HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa][HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceCurrent]
Loading...