Thus, when a user lands on one such fake YouTube web-page, he's told for making his Web-browser up-to-date with one given ActiveX component, which however, is an advanced backdoor that bypasses firewall and has been identified as Backdoor:Win32/Caphaw.A. The malware contains virtually all malicious functions associated with loading File Transfer Protocol (FTP) server, keylogger, as well as proxy server onto the target PC. Additionally, there's one integral remote desktop feature that's associated with Virtual Network Computing (VNC), the familiar open-source project.