Backdoor.Spigot.C

Backdoor.Spigot.C is a Backdoor Trojan Horse that allows unauthorized access to an infected computer. By default, The Trojan listens on port 6667. The existence of the file gspotbot.exe is an indication of a possible infection.

Note: Virus definitions dated prior to October 9, 2003 may detect this as Backdoor.Trojan.



This Trojan may have arrived in a spammed email disguised as a screensaver. The email may have had the following characteristics:

Subject: Re [2]
Message:
>Hi!
>Please send me screensaver
Hi!
Screensaver is in the attach.
Attachment: screensaver.zip

Protection

• Initial Rapid Release version October 9, 2003
• Latest Rapid Release version August 20, 2008 revision 017
• Initial Daily Certified version October 9, 2003
• Latest Daily Certified version August 20, 2008 revision 016
• Initial Weekly Certified release date October 15, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Medium

Distribution

• Distribution Level: Low