Backdoor.Noszbot

Backdoor.Noszbot a backdoor Trojan which stealthily enters its victim’s PC and allows complete access to the system to faceless criminal hackers. Once it roots itself in the system, Backdoor.Noszbot will connect to a remote server to receive commands. By allowing its authors remote access to the infected PC, this Trojan is able to perform various nefarious actions, which includes downloading additional malware and running any commands put to it by its authors.

Backdoor.Noszbot enters the system through corrupt third party downloads, and drive-by download tactics employed by corrupt websites. It may also be dropped onto the PC by other malware such as TrojanDownload:Java/Fbke.A. Because of its stealth infiltration and the fact that it operates wholly in the system’s background, the user will find it difficult to detect and remove Backdoor.Noszbot by himself. The presence of the following files on the system will be a clear indication of a Backdoor.Noszbot infection:

audiohd.exe
wudhost.exe
bjwW4z8qHWSn.exe

After infiltrating the system Backdoor.Noszbot will modify Windows registry entries so that it will launch each time Windows boots up. It will also create a mutex named “prHAxx23Xusnv” which will prevent more than one instance of the Trojan running on the system at the same time. Backdoor.Noszbot will then attempt to connect to the remote host so that it can receive further instructions and report the infection. It will connect to

Adm.jazteberabim.de

Depending on the instructions received, Backdoor.Noszbot will perform one or more of the following actions:

Download more malware
Initiate a Distributed Denial of Service (DDoS) attack
Run commands and executables

Based on the above evidence it is clearly determined that Backdoor.Noszbot is an unwanted infection. Users who fear infection should employ the removal power of a genuine security tool which will not only annihilate Backdoor.Noszbot but also protect against similar future attacks.