| Publisher | F-Secure | ||
|---|---|---|---|
| Format | HTML | Date added | 04 Dec 2001 |
| Topics | |||
| Downloads | 49 | ||
Updated: December 4, 2001
NAME: Ptsnoop
ALIAS: Backdoor.Ptsnoop
Ptsnoop is a simple backdoor program written in Visual Basic. Being activated it first looks for active RAS connections and exits immediately if none is found.
If a connection is present, the backdoor installs itself to system by copying itself as PTSNOOP.EXE file to \Windows\System\ directory and modifying WIN.INI file. The backdoor adds its execution string after LOAD= variable in [Windows] section of WIN.INI file. Diring this operation WIN.INI file gets copied to WIN.ANA file, the backdoor's execution st ring is then added and WIN.INI file is deleted. Then WIN.ANA file is renamed to WIN.INI file. This way the backdoor will become active every time Windows starts.
Being active the backdoor tries to connect to the following websites:
http://setway.cjb.net
http://setway1.cjb.net
http://setone.cjb.net
When the connection succeeds, the backdoor clips cursor to a certain area and allows a hacker or script on these websites to control mouse movement and window positions. It is not clear why this is done and it is impossible to check any more because the contents of the above mentioned websites were changed or removed.
Did you find this white paper useful?
15 out of 36 users found this white paper useful
Related white papers
Virtual SMB Centre in a Box?
What types of organizations have the most efficient IT operations? Data centers that provide highly available and resilient services with a minimum of human intervention and management? IT shops that can...
Virtualisation of SAP Applications with VMware ESX Server on IBM System x3850/x3950 M2
This whitepaper looks at how Virtualization is the concept of decoupling the hardware from the operating systems and applications. This can be implemented a number of ways as we will...
Increasing Energy Efficiency with x86 Servers
The current economic crisis has most companies scrambling for ways to get the most out of every dollar they spend. However, to date, many of the gains have been illusory...
Trend Watch: Mission Critcial x86
This paper examines how, over the past several years, research has shown many organisation moving mission-critical systems onto x86 servers.
Selecting Server Processors to Reduce Total Cost
This paper examines how Intel IT is standardizing on Intel® Xeon® processor X5570 (2.93 GHz) for two-socket servers for design computing and enterprise server virtualization. The newest high-end Intel® Xeon®...
A Superior Hardware Platform for Server Virtualisation
This Intel whitepaper examines how server virtualization is helping IT organizations improve data centre productivity in fundamental ways. It shows how you can consolidate multiple operating systems and applications per...
Intel® Xeon® Processor 5500 Series - An Intelligent Approach to IT Challenges
This paper looks at how, in many organizations, IT infrastructure has begun to constrain business efficiency and growth. However, IT infrastructure is actually limiting IT from investing in innovation. IDC...
