PCclient Backdoor - PrivacyAnywhere Spyware Research Library


	Home / Research


	PCclient

Details of the PCclient are shown below. This threat can be detected and cleaned using PestBlock Anti-Spyware.


Name:	PCclient
Type:	Backdoor
Risk:
Description:	Backdoor.PCclient will open various ports allowing unauthorized access to an infected PC. It will hide all references to itself using a driver service.

Removal
We do not publish here the MD5 checksums for files. PestBlock Anti Spyware can identify good file from bad more accurately.

Registry Items:

HKEY_CURRENT_USER\Software\Microsoft\OLE\Microsoft WIN32 DOS\MSdos32.exe
HKEY_CURRENT_USER\Software\Microsoft\OLE\Microsoft WIN32 Security\MSsec32.exe
HKEY_LOCAL_MACHINE\System\ControlSet00?\Services\Ymyebwtj
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Ymyebwtj
HKEY_LOCAL_MACHINE\System\ControlSet00?\Services\Ywvpysxl
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ywvpysxl
HKEY_LOCAL_MACHINE\System\ControlSet00?\Enum\Root\LEGACY_YWVPYSXL
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_YWVPYSXL
HKEY_LOCAL_MACHINE\SYSTEM\ControlSetEnum\Root\LEGACY_XUBKMWAU
HKEY_LOCAL_MACHINE\SYSTEM\ControlSetServices\Xubkmwau
HKEY_LOCAL_MACHINE\SYSTEM\ControlSetServices\Yaovxiua
HKEY_LOCAL_MACHINE\SYSTEM\ControlSetEnum\Root\LEGACY_YAOVXIUA
HKEY_LOCAL_MACHINE\SYSTEM\CServices\fulwqt
HKEY_LOCAL_MACHINE\SYSTEM\CServices\yulwqtlz
HKEY_LOCAL_MACHINE\SYSTEM\CServices\qnlchi
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_FULWQT
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_YULWQTLZ
HKEY_LOCAL_MACHINE\SYSTEM\CEnum\Root\LEGACY_QNLCHI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\fulwqt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\qnlchi

News for Sep 6, 2008

New Version!
PestBlock version 4.1. Many new featured, bugfixes. Download new version today! Learn More...

	Download Demo Version
	Buy Now!

Buy Online

	Online Store



	Discount Pricing

Spyware Research

Browse our Spyware Research Center.

	Spyware Research

Free Newsletter

Sign up for our free product newsletter today and get informed about new updates and releases by email. You will also receive the latest discounts and offers for our products!

	Click Here to Sign Up