How It Infects:
backdoor.Haxtor is installed through an ActiveX control, triggered when you click a malicious link or open an infected file.

What It Does:

1. Creates files in your Windows System folder.
2. Creates a Winlogon notify key that triggers the trojan to run when certain basic Windows functions are started.
3. Starts as a Windows Service to prevent malicious files from being detected.
4. Opens TCP ports allowing unauthorized access to your computer.

Vulnerable Operating Systems:
Windows 95/98/Me/NT/2000/XP

Type:
Trojan

Technical Name:
Trojan.PWS.Haxspy

Aliases:
BDS/Haxdoor.IO
BackDoor.Generic2.ULC
Backdoor.Haxdoor.IO
Win32/Starimp
Backdoor.Haxdoor.io
Haxdor!tr!04
Backdoor.Win32.Haxdoor.io
Win32/Rootkit.Agent.AT
W32/Haxdoor.AEJ
Rootkit/Haxspy
Troj/Haxdor-Gen
Backdoor.Haxdoor
Backdoor/Haxdoor.io
Backdoor.Haxdoor
Backdoor.Win32.Haxdoor.io


How To Avoid Infection:
Do not download unknown files or files from unknown sources. Do not click links in emails from unknown or suspicious sources. Scan all downloaded files with StopSign before running them. Ensure your computer has all critical updates from Microsoft Windows Update.