Aliases

Backdoor.Win32.Phase.10 (Kaspersky Lab) is also known as: Backdoor.Phase.10 (Kaspersky Lab), BackDoor-DW (McAfee),   PhaseServer.Trojan (Symantec),   BackDoor.Phase (Doctor Web),   Troj/Bdoor-DW (Sophos),   Backdoor:Win32/Phase.1_0 (RAV),   BKDR_PHASE.10 (Trend Micro),   TR/Phase.Cli (H+BEDV),   Win32:Trojan-gen. (ALWIL),   BackDoor.Phase (Grisoft),   Backdoor.Phase.A (SOFTWIN),   Trojan.Phase.10 (ClamAV),   Trj/PhaseZero (Panda),   Win32/Phase (Eset)

Description added	Feb 20 2002
Behavior	Backdoor

Technical details

This is a hidden (hacker's) remote administration utility similar to the known Backdoor.BO (aka Back Orifice Trojan) trojan. Also known as Phase Server. It allows to administrate infected computers from a remote console, to steal files, to damage installed software, upload/download/execute files, change/list/create/remove directory, copy/move/rename/delete file, lockup server, crash server, create/delete/read/modify registry key and so on.