Symantec.com > Security Response > Backdoor.Delf.E

Backdoor.Delf.E

Wild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Easy

Risk Level 1: Very Low

Discovered: November 26, 2002

Updated: February 13, 2007 11:55:27 AM

Type: Trojan Horse

Backdoor.Delf.E is a backdoor Trojan that allows unauthorized access to the computer by opening a port.

If the Backdoor.Trojan was successfully installed on the computer, it is possible that your system has been accessed remotely by an unauthorized user. For this reason it is impossible to guarantee the integrity of a system that has had such an infection. The remote user could have made changes to the system, including but not limited to the following:

Stealing or changing passwords or password files
Installing remote-connectivity host software, also known as backdoors
Installing keystroke logging software
Configuring firewall rules
Stealing credit card numbers, banking information, personal data, and so on
Deleting or modifying files
Sending inappropriate or even incriminating material from a customer's email account
Modifying access rights on user accounts or files
Deleting information from log files to hide such activities

To be certain that your organization is secure, you must reinstall the operating system, restore files from a backup that was made before the infection took place, and change all passwords that may have been on the infected computers or that were accessible from it. This is the only way to ensure that your systems are safe. For more information regarding security in your organization, contact your system administrator.