SPYWARE: Amitis
This signature detects the runtime behavior of the spyware Amitis, a remote administration tool. After infecting a host (the Amitis server is installed and running), this spyware enables remote attackers to completely control the host. Attackers can perform such activities as downloading and uploading files, rebooting or shutting down Windows, viewing or modifying registry keys, and viewing or killing processes.
Short Name
SPYWARE:RAT:AMITIS
Severity
Critical
Recommended
False
Recommended Action
Drop
Category
SPYWARE
Keywords
Amitis
Release Date
04/01/2005
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
Port
TCP/3547
False Positive
Unknown