Full
Name: |
LANfiltrator |
| Type: |
Trojan |
| Also Known As: |
BackDoor-ANC trojan [McAfee], BackDoor-ANC [McAfee], Backdoor.LanFiltrator.05, Backdoor.LanFiltrator.05 [Kaspersky], Backdoor.LanFiltrator.10, Backdoor.LanFiltrator.10 [Kaspersky], Backdoor.LanFiltrator.10.b, Backdoor.LanFiltrator.11, Backdoor.LanFiltrator.11.b, destructive program [F-Prot], security risk named W32/LanInfiltrator.A [F-Prot], security risk named W32/LanInfiltrator.B [F-Prot], security risk named W32/LanInfiltrator.C [F-Prot] |
| Danger Level: |
3 |
| Category Description: |
Trojans are malicious applications that pose themselves as legitimate software in order to trick users to install them. Once on the victim's machine, it may run any number of malicious process to steal vital information or inflict damage to other software. |
| Comment: |
LANfiltrator is a remote access tool, designed to access the remote computer through a router, LAN or proxy server. RAT?s generally work by connecting to the remote computers IP address. But when the RC is behind another device, ie, router, proxy, then there is an internet IP, that the connecting device uses, and the computers own LAN IP. It?s impossible for a normal RAT to connect to the remote computer, in other words, as it can not possibly access the sub-IP. Enter LANfiltrator.
How it works. Well as most of you more experienced Trojan users will know if you send a server to someone that is on a LAN you will not be able to connect to them, because their IP is given to them by their local DHCP server (The computer that shares the internet with the other computers) which connects them to the internet. So, their IP is hidden behind the server and can not be easily accessed on the internet by you. Well, with LANfiltrator it is now possible to do this. Well basically the server works like a client, but invisible, with server functions built into it. So this means that the client will listen and wait for the server to connect, basically like SIN notification but more complex, so once the server connects to your client with your ip you can use the client as if it was a normal one. If you won?t to know more about how the server will connect to your ip there is more info in the edit server of the application on how this works.
|
| |
|
| Properties: |
|
Back to the list of products removed by X-Cleaner
|
