Backdoor:Win32/Bezigate.A

Backdoor:Win32/Bezigate.A is a trojan that allows unauthorized access and control of an affected computer.

When executed, Backdoor:Win32/Bezigate.A copies itself to %windir%\age yaha.exe.

The malware modifies the following registry entries to ensure that its copy executes at each Windows start:

Adds value: "yaahaha"
With data: "c:\windows\age yaha.exe"
To subkey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Allows backdoor access and control

Backdoor:Win32/Bezigate.A allows unauthorized access and control of an affected computer. An attacker can perform any number of different actions on an affected computer using Backdoor:Win32/Bezigate.A. This could include, but is not limited to, the following actions:

• Download and execute arbitrary files
• Upload files
• Spread to other computers using various methods of propagation
• Log keystrokes or steal sensitive data
• Modify system settings
• Run or terminate applications
• Delete files

This malware description was produced and published using our automated analysis system's examination of file SHA1 b994a74c2e6de9158a0156c3fe54e7e062037e42.