Home / malware

PDF

Backdoor:Win32/Plugx.N

First posted on 30 April 2015.
Source: Microsoft

Aliases :

There are no other names known for Backdoor:Win32/Plugx.N.

Explanation :

Threat behavior

Installation
This threat can create files on your PC, including:

• %APPDATA%\doctmp\goshawk.dll
• %APPDATA%\doctmp\sqvag.exe
• %APPDATA%\doctmp\vtcp.dll
• \sqvag.lnk

Payload


Allows backdoor access and control

This threat can give a malicious hacker access and control of your PC. They can then perform a number of different actions, such as:

• Deleting files
• Downloading and running files
• Logging your keystrokes or stealing your sensitive data
• Modifying your system settings
• Running or stopping applications
• Spreading malware to other PCs
• Uploading files

This malware description was published using automated analysis of file SHA1 9887168ecfb4a5cb466ada4787706fed61a046a8.

Symptoms

The following can indicate that you have this threat on your PC:

• You see a file similar to:
  • %APPDATA%\doctmp\goshawk.dll
  • %APPDATA%\doctmp\sqvag.exe
  • %APPDATA%\doctmp\vtcp.dll
  • \sqvag.lnk

Last update 30 April 2015

 

TOP