Backdoor/Autoupder

Download free anti virus software

Anti virus software information

Order anti virus software (US$ 29.95)

Protector Plus
Anti virus software for

Windows
(XP, 2000, 2003, NT, Me, 98, 95)

Exchange

NetWare

Backdoor/Autoupder

Information about the Backdoor/Autoupder:

Backdoor/Autoupder is a backdoor. This backdoor disguises itself as Coolstuff.cab. This CAB file contains Coolstuff.OCX and Coolstuff.inf files. When the Coolstuff.OCX file is installed on the computer, it checks for existence of some well known firewall softwares.

Blackice.exe (Black Ice Defender)
Blackd.exe (Black Ice Defender)
Espwatch.exe (Esafe Protect Watch)
Lookout.exe (ISS Network Sniffer application)
Mpftray.exe (McAfee Personal Firewall)
Nisum.exe (Norton Internet Security)
Nmain.exe (Norton Internet Security)
Persfw.exe (Tiny Personal Firewall)
Smc.exe (Sygate Personal Firewall)
Serv95.exe (Esafe Eliashim)
Zonealarm.exe (ZoneAlarm Firewall)

In presence of firewall software, Backdoor/Autoupder ceases to function. In absence of firewall software, it tries to connect to a malicious website. After this it downloads some of the following files Ausvc.exe, Bvt.exe, Mnsvc.exe, Absr.exe under Windows folder. These 4 files are the primary components of the Backdoor/Autoupder. Execution of Ausvc.exe would drop Auupg.exe, Msvcp60.dll files into Windows folder and undo.bat into Temp folder. Mnsvc.exe connects to the pre-defined malicious website and downloads any new update of the Backdoor/Autoupder.

The backdoor makes changes to registry to load itself during next startup.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

This Backdoor/Autoupder first appeared during April 2002.

Other names of Backdoor/Autoupder:

This worm is also known as Troj_Sua.A.

Click here to download a 30 day Evaluation Copy of
Protector Plus anti virus for your operating system

About Protector Plus Anti virus Software Packages:

Proland Software is the developer of Protector Plus range of anti virus software packages. Protector Plus anti virus is available for Windows XP, Windows Me/98/95, Windows NT/2000/2003 servers and workstations, MS-Exchange 2000/2003, MS-DOS and NetWare servers.

Protector Plus range of anti virus products offer on-line virus detection and removal. All the packages have the ability to detect and isolate all types of viruses, trojans, worms and other types of malware. Protector Plus antivirus software can detect and remove reliably.

These products are updated on a continuous basis and the latest upgrades for all the platforms are made available for downloading from this site.

You can download the 30 day evaluation copy of
Protector Plus anti virus software free of cost for these platforms:

Windows | Exchange | NetWare

Download free anti virus software | Anti virus software information | Order anti virus software