Eng
  1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar


Backdoor:Solaris/Wanukdoor.A


Aliases:

Backdoor:Solaris/Wanukdoor.A

Malware
Backdoor
Solaris

Summary

Backdoor:Solaris/Wanukdoor.A is dropped by Worm:Solaris/Wanuk.A. It opens port 32982 which provides access to a remote user.



Disinfection & Removal

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details

This malware is being dropped by Worm:Solaris/Wanuk.A as its backdoor component. It opens port 32982 that provides access to a remote user. If the remote user is successfully connected to a targeted machine, he will receive a message "OK" otherwise he will receive "E". This backdoor gives a shell window to a remote user in which he can execute arbitrary commands.









Submit a sample

Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)



F-Secure Community

Give advice. Get advice. Share the knowledge on our free discussion forum.