Win32.Jokedoor

Win32.Jokedoor is a backdoor Trojan. That is no joke.  It is written in Delphi language and originated in Germany in March of 2001.  The author of the program is named Gentleman.

Related Files:
N/A

Category:
Backdoor

AKA:
Backdoor:Win32/Jokedoor.A
Backdoor:Win32/Jokedoor.B

Here are some the fingerprints it leaves:
5ef25e82f75ad568…
7098a8875c1177a0…
33712732430e3564…
31385919a456a390…
d44f1988a05f899f…
9e8128c86e11d89e…
f931029f61f47bde…
f81b79e82e566b69…
1a4ee0270009837b…
fecc7cfa2332f328…
6b6e2a0282e0de88…
df8f6091926b5e52…
f0a5ba4cfc4fae7a…

Once inside, it will open port 1337 TCP that will allow the hacker to enter at his “gentlemanly” leisure.   At startup, it will execute the following file: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run “JOKER.EXE”

Recommended Action:
Remove at once.

To restore the full functionality of your computer, Win32.Jokedoor must be removed manually or by a reputable anti-spyware application.  In order to remove manually, you must kill all running processes and then remove all remaining related files and folders.  This, however, will only remove Win32.Jokedoor.

If you have additional spyware, you could use safe and effective ZookaWare PC Cleaner.  ZookaWare PC Cleaner offers a free scan to determine the level of infection and then removal of ALL spyware from your system.  ZookaWare PC Cleaner offers one of the best guarantees in the business.  If you are not fully satisfied within 60 days, you are entitled to your money back.

Download Free Scan
ZookaWare runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select ZookaWare and click Uninstall.

One Response

  1. Gary Collins says:

    I do think all the problems have been eliminated. Thanks for all your good help! I have recommended SpyZooka to my friends.

Leave a Reply

Your email address will not be published. Required fields are marked *

css.php