Backdoor.Endool

Backdoor.Endool is a backdoor Trojan that gives an attacker unauthorized access to the computer on which it is installed. By default it opens port 6969 on the infected computer. The Trojan attempts to disable some antivirus and firewall programs by terminating their active processes.



NOTE: Definitions dated prior to November 13, 2002 detect this threat as Backdoor.Floodnet

Protection

• Initial Rapid Release version November 1, 2002
• Latest Rapid Release version August 20, 2008 revision 017
• Initial Daily Certified version November 1, 2002
• Latest Daily Certified version August 20, 2008 revision 016
• Initial Weekly Certified release date November 4, 2002

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low