|
GWGhost Backdoor Password Hijacker Information
| Name: |
GWGhost Backdoor |
| Category: |
Password Hijacker |
| Advice: |
Remove |
| Risk: |
Severe Risk
Severe threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction and exploits are in the wild. There exists a high possibility of potential system damage or security flaw. Attacker has complete control over your computer or install new software on your machine. |
| Description:
|
GWGhost is a backdoor server and is accessible from several known Trojan clients.
|
| Signatures:
|
process: gwghost.exe: MD5 Hash: cb1b10889e1da34a2d3...
process: server.exe: MD5 Hash: 141b634d081b5b68fb4...
process: gwghost.exe: MD5 Hash: d536a4127dbe5009667...
process: server.exe: MD5 Hash: 32a78cb5c9e84b3321b...
process: scanregw.exe: MD5 Hash: acc8b97e0e72dc38a03...
process: gwghost.exe: MD5 Hash: 9707cca232025879598...
process: setghost.exe: MD5 Hash: 81a2dafa4d05e4316ff...
process: server2.72.exe: MD5 Hash: 495511de216ff3a75a4...
process: Scanregw.exe: MD5 Hash: .. |
| Type: |
Password Hijacker - A Trojan software is any software on a user's computer that the user is not aware or intentionally installed. Most Trojan software is designed to perform some sort of actions that could jeopardize the user's security or privacy. |
Top Password Hijacker Visited Pages:
MSN Hotmail Password Stealer - Alias: PWS-Kcom.gen, Trojan.PSW.Akcom.g - 1234 visits
Hotmail Hacker X-Edition - 1064 visits
Y! Jacked v1.3 - 595 visits
Magic PS Yahoo! Messenger - Alias: Trojan.PSW.Sagic, Trojan.PSW.Sagic.11 - 563 visits
Fake login Yahoo - 339 visits
Passware Kit - 297 visits
Cache Password - 207 visits
PassView - 84 visits
Ace Password Sniffer 1.1 - 84 visits
Matiteman Mail Pass Stealer - Alias: Trojan.PSW.Mtmpas.b - 78 visits
Random Password Hijacker Pages:
Half Life Jacker - Alias: Trojan.Win32.HLJacker, Half Life Jacker 1.0
Asterisk Password v1.1
Zimenok
AIM Evil Doer - Alias: Trojan.PSW.AIM.EvilDoer
Pass Ripper Pro
trILLian rape
PasswordSpy
Kcom.gen - Alias: PWS-Kcom.gen, Trojan.PSW.Akcom.f
Password Director
Real McCoy AIM Password Stealer
|
