Browse Definitions :
Definition

Portal of Doom

Contributor(s): Matthew Haughn

Portal of Doom (abbreviated as PoD and sometimes spelled all one word, as PortalOfDoom) is a Trojan horse that hijacks the computers of unsuspecting Windows users running old operating systems. Computers running Windows 95, 98, ME, NT, XP and Vista are vulnerable to the Trojan.

PoD affords the attacker near-complete remote control of the target system. The Trojan enters through a back door on vulnerable machines, typically through TCP ports 9872-9875 and UDP ports 10067, 10167. Port 9875, in particular, is notorious for being exploited by this malware and as a result is sometimes referred to as the Port of Doom.  

The Trojan launches from the registry key HKLM\Software\Microsoft\Windows\CurrentVersion\Run. Portal of Doom can enter without causing any behavior that alerts the user and does not have to trick the user into running an executable file manually. It typically installs to C:\windows\system and its running process names can vary.

Malicious hackers can use PoD to look for sensitive data, such as credit card numbers and information that enables identity theft, or just to cause mischief. PoD was written in MS Visual Basic.

This was last updated in March 2016

Continue Reading About Portal of Doom

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

SearchCompliance

  • privacy compliance

    Privacy compliance is a company's accordance with established personal information protection guidelines, specifications or ...

  • data governance policy

    A data governance policy is a documented set of guidelines for ensuring that an organization's data and information assets are ...

  • risk management

    Risk management is the process of identifying, assessing and controlling threats to an organization's capital and earnings.

SearchSecurity

  • juice jacking

    Juice jacking is a form of hacking that compromises a device's USB charging port or charging cable, allowing hackers to break ...

  • DNS attack

    A DNS attack is an exploit in which an attacker takes advantage of vulnerabilities in the domain name system (DNS).

  • Advanced Encryption Standard (AES)

    The Advanced Encryption Standard, or AES, is a symmetric block cipher chosen by the U.S. government to protect classified ...

SearchHealthIT

SearchDisasterRecovery

SearchStorage

  • M.2 SSD

    An M.2 SSD is a solid-state drive (SSD) that conforms to a computer industry specification written for internally mounted storage...

  • RAID (redundant array of independent disks)

    RAID (redundant array of independent disks) is a way of storing the same data in different places on multiple hard disks or ...

  • cache memory

    Cache memory, also called CPU memory, is high-speed static random access memory (SRAM) that a computer microprocessor can access ...

Close