Home Malware Programs Backdoors BKDR_PCCLIEN.BQD

BKDR_PCCLIEN.BQD

Posted: December 21, 2011

Threat Metric

Threat Level: 8/10
Infected PCs: 88
First Seen: December 21, 2011
Last Seen: December 1, 2020
OS(es) Affected: Windows

BKDR_PCCLIEN.BQD is a backdoor Trojan that conducts unauthorized network activity to allow criminals to access your PC – this can be for the sake of stealing personal information, installing other types of malicious software or controlling the behavior of already-present programs. Because BKDR_PCCLIEN.BQ's main distribution method utilizes a Trojan dropper that's distributed as an e-mail file attachment, any effort at removing BKDR_PCCLIEN.BQD should always use an anti-malware scanner that can also detect droppers such as BKDR_PCCLIEN.BQD's own TROJ_ARTIEF.AEB. Symptoms of a BKDR_PCCLIEN.BQD infection can be minor or nonexistent, and SpywareRemove.com malware analysts recommend that you avoid any contact with BKDR_PCCLIEN.BQD in the first place by deleting its Kim Jong Il-themed e-mail messages.

BKDR_PCCLIEN.BQD – Just the Second Half of a PC-Violating Puzzle

BKDR_PCCLIEN.BQD is installed by TROJ_ARTIEF.AEB, a Trojan dropper that's distributed as a file attachment for mass-mailed e-mail. The actual file attachment looks like a harmless text document with the name 'Kim_Jong_il___s_death_affects_N._Korea___s_nuclear_programs.doc,' but any attempts to open this file will launch TROJ_ARTIEF.AEB, which will install BKDR_PCCLIEN.BQD. Other than unusual RAM usage, the presence of strange files or changes to your network settings, visible signs of an attack by BKDR_PCCLIEN.BQD can be negligible. Despite operating near-invisibly, BKDR_PCCLIEN.BQD is a high-level danger to all Windows-based computers and may be used to:

  • Steal personal information (including passwords, credit card details or identity credentials).
  • Install other PC threats – this may include keyloggers, RATs, worms or viruses.
  • Block security and anti-malware programs so that they can't remove BKDR_PCCLIEN.BQD and its associate TROJ_ARTIEF.AEB.
  • Change settings without permission, especially in the cases of settings that are linked to security or privacy. So far, SpywareRemove.com malware researchers have found that BKDR_PCCLIEN.BQD is configured to open port 8000 for its network-based activities.

Slamming Your Door on a BKDR_PCCLIEN.BQD Attack

If you delete suspicious e-mail messages like the ones that distribute BKDR_PCCLIEN.BQD and its Trojan dropper, your chances of being attacked by BKDR_PCCLIEN.BQD are low – SpywareRemove.com malware experts have found that BKDR_PCCLIEN.BQD has few alternative distribution routes at the time of this writing. However, any interaction with file attachments that could be infected with BKDR_PCCLIEN.BQD or TROJ_ARTIEF.AEB may result in infection and the consequential creation of a backdoor on your PC.

To re-establish security against BKDR_PCCLIEN.BQD attacks, disable BKDR_PCCLIEN.BQD by any means that are necessary (such as using Safe Mode, switching your OS or booting from a USB device) and then scan your PC with a fully-updated anti-malware application. After BKDR_PCCLIEN.BQD, TROJ_ARTIEF.AEB and any other PC threats have been removed, you may also need to manually-revert changes to your security settings. However, SpywareRemove.com malware experts do note that if this is done quickly enough, any chance of long-term damage to your computer is minor.

Loading...