Skip to main content
Microsoft Security Intelligence
Published Oct 10, 2011 | Updated Sep 15, 2017


Detected by Microsoft Defender Antivirus

Aliases: Win-Trojan/R2d2.360448 (AhnLab) W32/R2D2.A (Command) Win32/R2D2.A (ESET) Backdoor.Win32.R2D2.a (Kaspersky) Troj/BckR2D2-A (Sophos) Backdoor.R2D2 (Symantec)


Backdoor:Win32/R2d2.A is a trojan that communicates with a remote server to listen for commands from an attacker. The trojan monitors Skype communications, captures screen shots and may download and execute arbitrary files.

To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:

For more information on antivirus software, see

Follow us