SAdoor 1.1

Overview

Alias

Backdoor Program [Panda], Backdoor.Sadoor [Kaspersky], Backdoor.School.155 [Kaspersky], Backdoor/School.155!Server [Computer Associates], Bck/School [Panda], Win32/Sadoor!Trojan [Computer Associates],

Category

Telnet Server: Software that allows a remote user of a Telnet client to connect as a remote terminal from anywhere on the Internet and control a computer in which the server software is running.

Backdoor: A secret or undocumented means of getting into a computer system, or software that uses such a means to penetrate a system. Some software has a backdoor placed by the programmer to allow them to gain access to troubleshoot or change the program. Software that is classified as a "backdoor" is designed to exploit a vulnerability in a system, and open it to future access by an attacker.

Origins

Author

Claes M. Nyberg

Others By This Author

SAdoor ·

Date of Origin

April, 2001

Detection and Removal

Manual Removal

Follow these steps to remove SAdoor 1.1 from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.

Stop Running Processes:

Kill these running processes with Task Manager:

Unregister DLLs:

Unregister these DLLs with Regsvr32, then reboot:

Remove Files:

Remove these files (if present) with Windows Explorer:

SATAN1.0 SATAN1.1.1 SATANBUG SATANExtensions SAdoor SAdoor1.1 SBot1.0 SBot1.2 SBot2.0 SCBar