Backdoor.Poison.bta

Posted: June 24, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	8/10
Infected PCs:	30

First Seen:	June 24, 2013
Last Seen:	November 30, 2021
OS(es) Affected:	Windows

Backdoor.Poison.bta is a backdoor Trojan that uses a DLL-loading exploit to trick a benign application - the VMware Network Install Library Executable – into loading Backdoor.Poison.bta. Once Backdoor.Poison.bta is loaded, Backdoor.Poison.bta injects its code into other processes and enables further attacks, which can allow Backdoor.Poison.bta to hijack your browser, steal personal information, install other PC threats, etc. As a new version of the well-defined Poison Ivy family, Backdoor.Poison.bta represents the continuous nature of sophisticated malware development, and SpywareRemove.com malware researchers urge the use of both updated and reliable anti-malware products to block, detect and delete Backdoor.Poison.bta, as such things are needed.

Backdoor.Poison.bta – a Poison Pill Handed to You By an Unknowing Physician

Poison Ivy Trojans have seen many variants throughout just the last few months, and SpywareRemove.com malware researchers can point to e-mail file attachments as a major infection point for multiple Trojans from this family. Where Backdoor.Poison.bta, a new version of Poison Ivy, comes into play is in its unusual loading method: a DLL disguise that tricks VMware into thinking that Backdoor.Poison.bta actually is a component of its own software. While this kind of attack has been utilized in many other Trojans previously, cases of this cropping up in the Poison Ivy family have been sparse up until Backdoor.Poison.bta's appearance.

The DLL-loading only is the start of Backdoor.Poison.bta's attacks, which insert its own code into that of your browser's memory process as an easy way to work around any local firewall software. SpywareRemove.com malware experts haven't found anything else unusual in Backdoor.Poison.bta's payload, which can include major security issues, such as:

Allowing criminals to change your PC's settings or otherwise control it through commands sent to Backdoor.Poison.bta.
The installation of extra PC threats that are downloaded by Backdoor.Poison.bta without your consent being required.
Various means of theft of your personal information, including screen captures, keylogging, targeting passwords for specific programs (especially Windows accounts) and recording your audio input.
Redirecting your Web browser to malicious sites, such as copycat phishing sites, sites that host drive-by-download exploits or even mere advertising sites.

Overcome an Illness of Backdoor.Poison.bta's Devising

Backdoor.Poison.bta is a high-level PC threat that should be considered an extreme security hazard for any computer that's compromised by Backdoor.Poison.bta. Because Backdoor.Poison.bta is a memory-injecting Trojan that is difficult to remove in its default state, SpywareRemove.com malware experts recommend that you use basic security steps, such as booting in Safe Mode or booting from a flash drive, to prevent Backdoor.Poison.bta from being loaded. After you've stopped Backdoor.Poison.bta from loading, removing Backdoor.Poison.bta with a decent anti-malware program should be trivial.

Backdoor.Poison.bta and other Poison Ivy variants often are distributed to new computers through e-mail. Unusual file attachments from such sources always should be scanned before opening them, since they may install Backdoor.Poison.bta – or any of various similar Trojans – without showing any symptoms that would be visible evidence of the presence of a security-compromising infection.

Backdoor.Poison.bta

Threat Metric

Backdoor.Poison.bta – a Poison Pill Handed to You By an Unknowing Physician

Overcome an Illness of Backdoor.Poison.bta's Devising

Leave a Reply