BKDR_JAVAWAR.JG

Posted: December 28, 2012

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	6/10
Infected PCs:	15

First Seen:	December 28, 2012
OS(es) Affected:	Windows

BKDR_JAVAWAR.JG is a backdoor Trojan that uses Java-based server administration tools to compromise the affected PC. Although BKDR_JAVAWAR.JG is a specialized backdoor Trojan that's incapable of compromising PCs that don't have the appropriate server software, BKDR_JAVAWAR.JG has many dangerous functions that can be used to attack appropriate computers – including the ability to download, install or delete files on a whim. To protect yourself from BKDR_JAVAWAR.JG, server administrators in particular are encouraged to keep all of their software updated, use strong passwords and make regular use of anti-malware software against common infection vectors. Like any Trojan that attempts to hide while conducting high-level attacks, BKDR_JAVAWAR.JG should be deleted by an ani-malware program with a good reputation for handling such PC threats.

How BKDR_JAVAWAR.JG Enacts a War Against Your PC's Security

BKDR_JAVAWAR.JG is a JSP or JavaServer Page that exploits Java-based web servers. Once BKDR_JAVAWAR.JG gains access to a compromised server, BKDR_JAVAWAR.JG can exploit Java to browse files, delete them, move them, rename them, upload them to remote servers, edit them, create copies or even download new files from remote servers. This basic backdoor functionality can be used to steal personal information or to force the compromised PC to distribute malware like BKDR_JAVAWAR.JG. SpywareRemove.com malware experts also stress that BKDR_JAVAWAR.JG's various attacks don't display visible symptoms, with the exception of any potentially obvious changes to your PC's files – which aren't guaranteed to be in evidence.

Unfortunately, distribution methods for BKDR_JAVAWAR.JG haven't yet been confirmed, and the presence of BKDR_JAVAWAR.JG may or may not be indicative of the presence of other types of PC threats. SpywareRemove.com malware researchers have been able to confirm the range of BKDR_JAVAWAR.JG's operating system compatibilities, however: like most Trojans, BKDR_JAVAWAR.JG targets Windows, starting from Windows 2000 up to Windows 7.

Determining Whether Your PC is On BKDR_JAVAWAR.JG's Hit List

Besides the OS compatibilities, BKDR_JAVAWAR.JG also narrows its targets down by only being compatible with Java server machines. PCs that don't use Java-based server software (such as Apache Tomcat, Resin or Jetty) aren't vulnerable to BKDR_JAVAWAR.JG, which is incapable of running outside of these Java-based server environments. Nonetheless, similar backdoor Trojans have shown a broader compatibility with more PC configurations than BKDR_JAVAWAR.JG. To ward off such PC threats, the possession of anti-malware security, as well as general web-browsing safety measures, always is recommended.

PCs with administrative access for servers often are used to distribute malicious software without the consent of the administrators. In most cases, the use of easily-compromised programs or easily-cracked passwords are at fault for the initial attacks. If you have any reason to think that BKDR_JAVAWAR.JG may have compromised your computer, SpywareRemovbe.com malware experts recommend that you remove BKDR_JAVAWAR.JG immediately and with a competent anti-malware program – hopefully, before any damage can result from BKDR_JAVAWAR.JG's presence.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

has.jsp

File name: has.jsp
Size: 33.12 KB (33124 bytes)
MD5: be607efbe67c1551f9803fd1aeaea316
Detection count: 17
Mime Type: unknown/jsp
Group: Malware file
Last Updated: January 7, 2013