Backdoor:MSIL/Pontoeb.N

Detected by Microsoft Defender Antivirus

Aliases: Trojan.Agent.AVFA (BitDefender) Trojan.DownLoader6.3425 (Dr.Web) MSIL/Agent.NLB (ESET) Trojan-Dropper.Win32.Dapato.baff (Kaspersky) Generic Dropper!1qq (McAfee) W32/Agent.AASJB (Norman) Troj/Agent-VTP (Sophos) TROJ_DROPPER.VNK (Trend Micro)

Summary

Backdoor:MSIL/Pontoeb.N is a trojan that connects to a remote server to listen for commands, sent by an attacker, that instruct the trojan to perform various payloads. The payloads could include instructions to download files, gather and send details about your computer, initiate flood attacks against other computers and update the trojan code.

To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:

For more information on antivirus software, see http://www.microsoft.com/windows/antivirus-partners/.

Additional remediation instructions

This threat may make lasting changes to a computer's configuration that are NOT restored by detecting and removing this threat. For more information on returning an infected computer to its pre-infected state, please see the following article/s:

Viewing hidden and/or system files:

For Windows 7: http://windows.microsoft.com/en-US/windows7/Show-hidden-files
For Windows Vista: http://windows.microsoft.com/en-US/windows-vista/Show-hidden-files
For Windows XP: http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/win_fcab_show_file_extensions.mspx?mfr=true

Backdoor:MSIL/Pontoeb.N

Summary

What to do now

Additional remediation instructions

Technical information

Threat behavior

Installation

Payload

Additional information

Prevention

Symptoms

System changes