Backdoor.Odivy

Backdoor.Odivy is a malicious backdoor Trojan that opens a back door on the infected computer by connecting to TCP port 80: praxair.no-ip.org. Backdoor. Odivy may come as an email attachment, which usually is in the form of an 7z or RAR SFX executable. Backdoor.Odivy then injects code, which is the PoisonIvy remote administration tool (RAT), into the default web browser and the process explorer.exe that makes it exposed to remote administration tool. By using Backdoor.Odivy, a remote attacker can monitor a PC system. The remote attacker then gives commands to the Backdoor.Odivy to execute malicious actions such as steal personal information from the compromised computer system, track and collect your browsing habits, and gather data about other PCs in the local network. You should remove Backdoor.Odivy immediately with a reliable anti-malware program.

Technical Details