Skip to main content
Skip to main content
Microsoft Security Intelligence
Published Dec 22, 2009 | Updated Sep 15, 2017

Backdoor:Win32/Gaertob.A

Detected by Microsoft Defender Antivirus

Aliases: Trojan.Win32.Buzus.ctwu (Kaspersky) W32/Obfuscated.A!genr (Norman) Win32/Buzus.CTTV (ESET)

Summary

Backdoor:Win32/Gaertob.A is a trojan that allows unauthorized access and control of an affected computer. It may be ordered by a remote attacker to spread via peer-to-peer file sharing. It may also change the affected user's browser Start page.
Manual removal is not recommended for this threat. To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as Microsoft Security Essentials, or the Microsoft Safety Scanner. For more information about using antivirus software, see http://www.microsoft.com/security/antivirus/av.aspx.
Additional remediation instructions for Backdoor:Win32/Gaertob.A
This threat may make lasting changes to an affected system’s configuration that will NOT be restored by detecting and removing this threat. For more information on returning an affected system to its pre-infected state, please see the following article/s: 
Follow us