Home / malwarePDF  

Backdoor:Win32/Caphaw.AH


First posted on 06 March 2014.
Source: Microsoft

Aliases :

There are no other names known for Backdoor:Win32/Caphaw.AH.

Explanation :

Threat behavior Backdoor:Win32/Caphaw.AH is a trojan that allows unauthorized access and control of an affected computer.

Installation

Backdoor:Win32/Caphaw.AH creates the following files on your PC:

  • %windir%\schedlgu.txt
  • %windir%\tasks\googleupdatetaskusers-1-5-21-1844237615-2111687655-839522115-500ua.job


Payload

Allows backdoor access and control
Backdoor:Win32/Caphaw.AH gives a hacker access and control of your PC. They can then perform a number of different actions, including:
  • Downloading and running files
  • Uploading files
  • Spreading malware to other PCs
  • Logging your keystrokes or stealing your sensitive data
  • Modifying your system settings
  • Running or stopping applications
  • Deleting files

This malware description was produced and published using automated analysis of file SHA1 9c4c9360152fb1c636f790a6116974728e1e3ade.Symptoms

System changes

The following could indicate that you have this threat on your PC:

  • You have these files:

%windir%\schedlgu.txt
%windir%\tasks\googleupdatetaskusers-1-5-21-1844237615-2111687655-839522115-500ua.job

Last update 06 March 2014

 

TOP