TROJAN: Oblivion Initial Server Response

This signature detects the initial server response from the Oblivion backdoor. Detecting this response indicates that your system is infected with the Oblivion backdoor Trojan. Using the Oblivion client, attackers can gain unauthorized access to the host computer and execute malicious operations.

Extended Description

Oblivion is a Trojan that infects Windows operating systems and allows attackers to take control of the victim host.

References

CVE: CVE-1999-0660

URL: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.oblivion.html http://www.sophos.com/virusinfo/analyses/trojoblivionb.html http://www.pestpatrol.com/pestinfo/b/backdoor_oblivion.asp

Short Name

TROJAN:MISC:OBLIVION-SRV-RESP

Severity

Major

Recommended

False

Recommended Action

Drop

TROJAN: Oblivion Initial Server Response

Extended Description

References

Found a potential security threat?