Win32/Coolvidoor [Threat Name] go to Threat

Win32/Coolvidoor.AY [Threat Variant Name]

Category trojan
Size 104960 B
Aliases Backdoor:Win32/Coolvidoor.F (Microsoft)
  BDS/CVidoor.104960 (Avira)
Short description

Win32/Coolvidoor.AY serves as a backdoor. It can be controlled remotely.


The trojan does not create any copies of itself.

Information stealing

The trojan collects the following information:

  • computer name
  • user name
  • computer IP address
  • information about the operating system and system settings
  • current screen resolution
  • list of disk devices and their type
  • list of files/folders on a specific drive
  • number of milliseconds that have elapsed since the system was started

The trojan attempts to send gathered information to a remote machine.

Other information

The trojan serves as a backdoor. It can be controlled remotely.

The trojan acquires data and commands from a remote computer or the Internet.

The trojan contains a URL address. The TCP/IP protocol is used in the communication.

It may perform the following actions:

  • download files from a remote computer and/or the Internet
  • send the list of disk devices and their type to a remote computer
  • send the list of files on a specific drive to a remote computer
  • send files to a remote computer
  • send gathered information

Please enable Javascript to ensure correct displaying of this content and refresh this page.