Backdoor.Korplug.B

Backdoor.Korplug.B is a backdoor Trojan designed to steal personal information while preventing the PC user from detecting its presence. Although Backdoor.Korplug.B's distribution still is in low numbers, its ability to steal information through generalized spyware functions isn't to be underestimated, and malware experts would suggest that you change all passwords after dealing with a confirmed Backdoor.Korplug.B infection. With many of its components disguised to look like legitimate Mozilla-related products, deleting Backdoor.Korplug.B is a job that should be left to anti-malware tools.

The Spy that Pretends to Be Sent by Mozilla

Backdoor.Korplug.B is a simple but effective backdoor Trojan with secondary functions of types that usually are attributed to spyware. During its installation, Backdoor.Korplug.B uses the Mozilla brand name liberally to disguise its Registry entries and files, with the result of most of its software appearing to be harmless to scans undertaken by the human eye. Although Backdoor.Korplug.B does create a visible system service, this service is mislabeled as a 'Mozilla Maintenance' service. Finally, Backdoor.Korplug.B injects itself into Svchost.exe, a standard component of the Windows OS.

One of the files under Backdoor.Korplug.B's Mozilla disguise, Trend2013.dat, is used for keylogging attacks that monitor your keyboard input. Any information typed through your keyboard is recorded to an external log, which then is transferred to criminals. Malware researchers often find such attacks to be the sources behind account hijacks and related security compromises.

Of course, to transfer this file, Backdoor.Korplug.B also needs to open a backdoor on your PC. Through this backdoor, criminals often initiate other attacks, such as installing new threats or controlling the PC's system settings. A quick response to a Backdoor.Korplug.B infection is crucial for minimizing the potential damage that criminals may cause to your computer, although malware researchers warn that you may or may not see any symptoms during the attacks.

Plugging Up the Security Hole Drilled by Backdoor.Korplug.B

Backdoor.Korplug.B appears to be heavily reliant on its disguise as a way to keep itself installed on your PC. Once noticed, Backdoor.Korplug.B doesn't have major defenses against most updated anti-malware products, and removing Backdoor.Korplug.B with these programs should be a simple affair. However, as usual, the catch is noticing Backdoor.Korplug.B in the first place, which may be difficult in environments that don't benefit from passive anti-malware protection.

With Backdoor.Korplug.B removed, your next step always should be to verify the safety of any potentially compromised information, as well as the safety of your PC. Change passwords, security questions and other pertinent information that may have been stolen by Backdoor.Korplug.B. Check your firewall program for full functionality, and be sure to close any network ports that weren't open prior to the Backdoor.Korplug.B attack. Malware analysts emphasize that a rapid, comprehensive response will keep a temporary Backdoor.Korplug.B infection from becoming a long-term issue.

Technical Details