This backdoor may be downloaded from remote site(s) by other malware. It may be dropped by other malware. It may be also downloaded unknowingly by a user when visiting malicious Web sites. This backdoor drops the following files. It then registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating registry keys/entryies. This backdoor listens on UDP port 848. It may then enable a remote malicious user to issue commands.


More...