Back Orifice is a Microsoft Windows 95/98/NT/2000 "backdoor" utility that allows a remote attacker to control a computer across a TCP/IP connection using a simple console or GUI application.
Back Orifice is a small and self-installing utility. Executing the server on any Windows machine installs it and moves the Back Orifice executable onto the target system, where it will not interfere with other applications that are running. An alternate method of distribution involves attaching Back Orifice to another Windows executable, which will run normally after installing the Back Orifice server.
Once running, Back Orifice does not appear in the task list or close-program list, and it re-starts every time the computer is started. The Back Orifice filename is
configurable prior to its installation and can be upgraded easily by uploading the newest version.
Specialized intrusion prevention devices may detect this module's network communications.