TROJAN: Phase Zero Initial Server Response

This signature detects the initial server response from the Phase Zero Trojan. Detecting this response indicates that your system is infected with the Phase Zero backdoor Trojan. Using the Phase Zero client, attackers can gain unauthorized access to the host computer and execute malicious operations.

Extended Description

Phase Zero is a Trojan that infects Windows operating systems and allows a remote attacker to take control of the infected victim.

References

CVE: CVE-1999-0660

URL: http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453075695 http://www.juniper.net/security/auto/vulnerabilities/vuln1345.html http://www.glocksoft.com/trojan_list/Phase_Zero_Phase_0.htm

Short Name

TROJAN:MISC:PHASE-ZERO-SRV-RESP

Severity

Major

Recommended

False

Recommended Action

Drop

TROJAN: Phase Zero Initial Server Response

Extended Description

References

Found a potential security threat?