14 DAY TRIAL // BKDR_HUPIGON.IFZ is a fresh piece of backdoor, which targets most Windows versions including 98, ME, NT, 2000, XP and Server 2003. Security company Trend Micro set a high damage potential along with a low overall risk rating and a low distribution potential. However, the backdoor can easily infect your computer, as it can arrive on the system when visiting an infected website or may be deployed by other infections. What's interesting is that it attempts to modify some Windows registry keys, in order to be sure it is started every time the operating system is fully loaded.
"It creates registry entries to enable its automatic execution at every system startup. It employs registry shell spawning so that it executes when files of certain types are run. It does this by creating registry entries", Trend Micro wrote in the advisory. "It modifies registry key(s)/entry(ies) as part of its installation routine."
In addition to all these modifications, BKDR_HUPIGON.IFZ also opens a random port to allow the attacker to get control over the affected computer. Imagine that once the connection is established, the attacker can do whatever he wants with the system.
"It opens a random port to allow a remote user to connect to the affected system. Once a successful connection is established, the remote user executes commands on the affected system", Trend Micro continued.
Since the backdoor attempts to create some new registry entries, it can be easily spotted by the security applications meant to protect this side of the operating system. Moreover, an up-to-date antivirus solution should be able to block the installation of the backdoor, so you're advised to apply the latest virus definitions. In addition, avoid visiting unknown or suspect websites coming from untrusted sources.