TROJAN: PsychWard Initial Server Response

This signature detects the initial server response from a PsychWard backdoor. Detecting this response indicates that your system is infected with the PsychWard backdoor Trojan. Using the PsychWard client, attackers can gain unauthorized access to the host computer and execute malicious operations.

Extended Description

PsychWard is a backdoor Trojan that infects Microsoft Windows operating systems. It allows a remote attacker to take control of the infected host.

Short Name
TROJAN:MISC:PSYCHWARD-SRV-RESP
Severity
Major
Recommended
False
Recommended Action
Drop
Category
TROJAN
Keywords
CVE-1999-0660 Initial PsychWard Response Server
Release Date
01/14/2004
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
Port
TCP/13013
False Positive
Unknown
CVSS Score

8.8

Found a potential security threat?