Backdoor.Win32/64.Korablin.a

Posted: February 13, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	2/10
Infected PCs:	77

First Seen:	February 13, 2013
OS(es) Affected:	Windows

Backdoor.Win32/64.Korablin.a is one of the Windows-specific aliases for Davinci or Morcut, a multi-platform spyware program that's capable of stealing your web-browsing history, the content of instant messenger conversations, various account passwords and other types of private information. SpywareRemove.com malware experts also warn that Backdoor.Win32/64.Korablin.a is capable of infecting and distributing itself through both Windows mobile devices and external storage devices (a typical strategy for worms). Backdoor.Win32/64.Korablin.a's delivery system is relatively advanced and uses several PC threats together to install Backdoor.Win32/64.Korablin.a without your permission. Like all forms of spyware, you should react to a Backdoor.Win32/64.Korablin.a infection by deleting Backdoor.Win32/64.Korablin.a with a trustworthy anti-malware product.

The Routes Backdoor.Win32/64.Korablin.a Takes to Pounce on Your Computer

Backdoor.Win32/64.Korablin.a is an alias for the well-known Davinci, a worm and spyware application that also is compatible with Mac's OS X and WinCE-based mobile devices. Even though Backdoor.Win32/64.Korablin.a is marketed as a supposedly legal surveillance program, criminals appear to be happy to use Backdoor.Win32/64.Korablin.a to steal confidential information from other PC users via conventional methods: installing Backdoor.Win32/64.Korablin.a through a drive-by-download attack.

Backdoor.Win32/64.Korablin.a's installations may rely on spam e-mail messages or other methods of distributing harmful links prior to exposing the compromised PC to the web content that hosts the drive-by-download exploit, which is identified as CVE-2013-0633. Because this is a Flash vulnerability that has been patched, SpywareRemove.com malware experts encourage any Flash-using PC users to update Flash immediately, if they haven't done so already – this will block Backdoor.Win32/64.Korablin.a's main means of infecting your PC.

However, Backdoor.Win32/64.Korablin.a also may distribute itself through your USB devices or through mobile phone devices that come into contact with an infected computer. This attack involves Backdoor.Win32/64.Korablin.a copying itself to said device and installing itself without your permission, a technique that SpywareRemove.com malware analysts have seen often-used by other worms.

Backdoor.Win32/64.Korablin.a: an Evil Genius at Cyber-Highway Robbery

Besides its worm distribution features, Backdoor.Win32/64.Korablin.a's functions hinge upon the covert monitoring of personal information and activities on your computer. The broadness of Backdoor.Win32/64.Korablin.a's attacks may place most types of sensitive data at risk, but SpywareRemove.com malware experts particularly note the following vulnerable areas:

Login credentials for your web browsers (IE, Chrome, etc).
Instant messaging application conversations.
E-mail clients and websites.
Visual information that can be captured via periodic screenshots.
Information that's typed through your keyboard.
Your web-browsing history.

It also should be emphasized that similar attacks pertain to mobile phones and related devices that use WinCE (as opposed to being limited to Mac/Windows computers). Once you've deleted Backdoor.Win32/64.Korablin.a with the anti-malware application of your preference, SpywareRemove.com malware experts strongly recommend that you take further steps to prevent your private information from being abused. If any possibility of Backdoor.Win32/64.Korablin.a having compromised them is evident, your account passwords, e-mail addresses and security questions should be changed.

Backdoor.Win32/64.Korablin.a

Threat Metric

The Routes Backdoor.Win32/64.Korablin.a Takes to Pounce on Your Computer

Backdoor.Win32/64.Korablin.a: an Evil Genius at Cyber-Highway Robbery

Leave a Reply