TROJAN: Massaker Initial Server Response

This signature detects the initial server response from the Massaker Trojan.

Extended Description

Through the Massaker client, remote attackers can gain unauthorized access and control of the infected system.

Short Name
TROJAN:MISC:MASSAKER-SRV-RESP
Severity
Major
Recommended
False
Recommended Action
Drop
Category
TROJAN
Keywords
Initial Massaker Response Server
Release Date
01/14/2004
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
Port
TCP/7119
False Positive
Unknown

Found a potential security threat?