The most award-winning anti-spyware software
Get serious about removing spyware with Spy Sweeper - the award-winning anti-spyware software trusted by millions of home computer users.
$29.95
Spyware & Virus Directory
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Remacc.SAdoor
SUMMARY
Behavior
Remacc.SAdoor is a backdoor program that uses a covert communication channel. It monitors network traffic on the host system and carries out certain actions if it sees a certain packet.Symptoms
Your Symantec antivirus program detects Remacc.SAdoor.Transmission
Remacc.SAdoor is normally installed by an intruder as a backdoor to the compromised system. However it can also be used as an remote administration tool.Protection
- Virus Definitions (LiveUpdate™ Weekly) December 31, 2003
- Virus Definitions (Intelligent Updater) December 29, 2003
TECHNICAL DETAILS
When Remacc.SAdoor is executed, it monitors network traffic on a selected network interface. When it sees a certain packet, it will perform one of the following actions:
- Execute a shell command
- Connect to a remote host through TCP
- Listen on a TCP port for a remote client to connect
The command data that is sent after trigger packet is found is encrypted.
The packet that is used to trigger Remacc.SAdoor is configurable. It can be an IP, ICMP, UDP or TCP packet with certain characteristics. The characteristics that can be examined include:
- The source and destination ports
- The beginning of a payload
- TCP flags
- Sequence and acknowledge numbers
- ICMP types
- ICMP codes
- ICMP echo identity numbers
- IP TOS and TTL values
REMOVAL
The following instructions pertain to all Symantec antivirus products that support Security Risk detection.
- Update the definitions.
- Run a full system scan and delete all the files detected as Remacc.SAdoor.
1. Updating the definitions
To obtain the most recent definitions, start your Symantec program and run LiveUpdate.
2. Scanning for and deleting the files
- Start your Symantec antivirus program and run a full system scan..
- If any files are detected as Remacc.SAdoor, click Delete.
Note: If your Symantec antivirus product reports that it cannot delete a detected file, write down the path and file name. Then use Windows Explorer to locate and delete the file.
Spy Sweeper 5.2 stops spyware in its tracks while offering home computer users the ability to configure the program to suit their specific needs, such as:
Choose a Quick, Full or Custom Sweep: With Spy Sweeper 5.2, you can easily choose to perform a quick, full or customized sweep. If you're looking for an immediate diagnosis, choose a quick sweep. For a pinpointed search, customize your sweep to have Spy Sweeper skip files by folder or file extension. For a deep cleaning, opt for a full sweep.
Exclude Files from a Sweep: Spy Sweeper allows you to save time during a sweep by skipping specific files or different sections of your PC. You can select specific file extension, such as .xls or .mpg to exclude.
Additional Highlights
As soon as it's installed, Spy Sweeper gives 360 degrees of protection against spyware, including:
Simple Sweeps: Detecting spyware and removing unwanted programs found on your computer in three effortless steps
Easy Management: Quickly and simply configure program, sweep and upgrade options
Fast Home: Use the home screen to access the most commonly used functions of Spy Sweeper
Shields Summary: A redesigned shields summary page makes it simple to see at a glance which shields are on or off
Action Alerts: Receive clear, easy-to-understand notifications when new spyware threats are detected
"Spy Sweeper remains a favorite for protection from spyware."
"This program's dominance is apparent as soon as you install it."
