Win32.Novadoor
Backdoor Trojan program Win32.Novadoor was first unleashed onto computer users in October of 2002. It is written in Delphi language and leaves the following fingerprints:
46a0c76ef3aef2cc…
7118b8f8946178b9…
275a17438aa186cd…
12c73e7354fa9307…
a05c6c56f9349f0d…
28353714a26074d7…
73981b9d9b65db8c…
540241f29f9e0a72…
24991aa04d07b49d…
8770f21f4c2c2c07…
b6ab3b9b6144e68d…
dc58d0097ea074f3…
Related Files:
7140F748.EXE
A46E2E99.EXE
AKA:
Backdoor.Win32.Novadoor.10
Backdoor.Novadoor.10
BackDoor-AMJ
Backdoor.Trojan
BackDoor.Nova.10
Troj/Niovado
Backdoor:Win32/Novadoor.1_0
BKDR_NIOVADOR.10
BDC/Niovadoor.10.A
Win32:Trojan-gen.
BackDoor.Novadoor.B
Backdoor.Novadoor.1.0
Win32/Niovadoor.10
Category:
Backdoor Trojan
It will affect with following machines:
Windows 2000
Windows 95
Windows 98
Windows Me
Windows NT
Windows Server 2003
Windows Vista
Windows XP.
It is a Windows PE EXE file. It will enter through port 54312 TCP and then wait for instructions from its author.
Recommended Action:
Remove at once.
To remove Win32.Novadoor, all files, folders, registry keys and registry values that are related to Nova must be terminated and removed. This process can be time-consuming and confusing for many computer users. For easier and automatic removal, there is ZookaWare PC Cleaner.
ZookaWare PC Cleaner is a reliable and effective spyware removal system. A member of the ZookaWare family of products, this program is backed by numerous. For fast results and safe removal, try ZookaWare PC Cleaner.
I’m using SpyZooka for almost a year and I had no problem. It’s the first one that really helped me and the only one I can trust.