What does Win32.Backdoor.Beasty does?

Backdoor.Beastdoor embeds itself into explorer.exe and iexplore.exe which can run without notice by the user. This trojan behaves as a backdoor which can be configure to disable firewalls and AV applications. Once run, it allows attacker to gain access and control over the infected machine. This trojan is also capable of sending notification to the attacker via email and ICQ.

When Backdoor.Beasty.E is executed, it does the following:

1. Copies itself as these files:
   • %Windows%\Svchost.exe
   • %System%\Wbem\Wb.com
   • %System%\Com\Mscom32.com
2. Creates the registry key:HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\
   {45DD0432-AA51-31EF-EEFA-06AA12E6115C}\StubPath = %System%\wbem\wb.com
   
3. Adds the value:COM Service %System%\COM\mscom32.comto the registry key:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
   Policies\Explorer
4. May add the value, shell32.pif to the following registry keys:HKEY_CLASSES_ROOT\comfile\shell\open\command
   HKEY_CLASSES_ROOT\exefile\shell\open\command
   HKEY_CLASSES_ROOT\piffile\shell\open\commandso that the Trojan is executed each time you execute a .com, .exe, or .pif file.

Other Names of Win32.Backdoor.Beasty

• Backdoor.Beastdoor.HF [PCTools]
• Backdoor.Beasty.G [Symantec]
• Backdoor.Win32.Beastdoor.av [Kaspersky Lab]
• BackDoor-AMQ [McAfee]
• BKDR_BEASTDOOR.D [Trend Micro]

Recommendation:

If you have got any trace of Win32.Backdoor.Beasty on your system, we suggest you to take immediate steps for its detection and removal from your system.

Free Scan for Win32.Backdoor.Beasty

What is a Backdoor threat like Win32.Backdoor.Beasty?

A backdoor is a method of bypassing normal authentication, securing remote access to a computer, obtaining access to plaintext, and so on, while attempting to remain undetected. Usually a backdoor lies in the program code and is created by a programmer. Backdoors in your computer may be accessed by attackers without your knowledge or consent. Backdoors are considered to be real security threats.

How your system gets infected with Backdoors like Win32.Backdoor.Beasty?

There are many ways your computer could get infected with Backdoors. Backdoors can come bundled with shareware or other downloadable software. Another method of distributing Backdoors involves tricking you by displaying deceptive pop-up ads that may appear as regular Windows notifications with links which look like buttons reading Yes and No. No matter which "button" that you click on, a download starts, installing Backdoors on your system. Backdoors like Win32.Backdoor.Beasty install on your computer through a trojan and may infect your system without your knowledge or consent.

What damage can a Backdoor threat like Win32.Backdoor.Beasty make?

Backdoors may attempt to change your computer's desktop, hijack your browser, monitor your Internet browsing activities, change system files, and can do this without your knowledge or permission. Therefore, it is strongly recommended to remove all traces of Backdoors from your computer.

How to remove Backdoor like Win32.Backdoor.Beasty?

Removal of Backdoors like Win32.Backdoor.Beasty is extremely important. You may find instructions on some website for the manual removal of Backdoors like Win32.Backdoor.Beasty, but many times these Backdoors re-surface after you get rid of them manually. It is best to take help of a professional software so as to completely remove Backdoors like Win32.Backdoor.Beasty from your system.

Additional Resources related to Win32.Backdoor.Beasty: