Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||Opens ports, and allows malicious users to access the affected system. |
|Detection updated on:||Sept. 24, 2002|
|Country of origin:||FRANCE|
RBackdoor is a Trojan with no dangerous effects as the only actions it carries out are the following: it opens and uses communication ports (initially port 4820) and assigns a password to communications.
When RBackdoor reaches a computer, it goes memory resident and waits for a Telnet connection -or a connection carried out with a similar program- to be established with the apropriate password through the port the Trojan opened.
It is easy to become infected by RBackdoor as it can reach a computer through several means of transmission: e-mail messages carrying infected documents, computer networks, CD-ROMs, Internet downloads, FTP, floppy disks, etc.
Once Nidra has carried out its actions, it displays the following message on the screen:
Additionally, Nidra generates a great number of processes, which will cause affected systems to slow down.