TROJAN: R3c Initial Server Response
This signature detects the initial server response from a R3c backdoor. Detecting this response indicates that your system is infected with the R3c backdoor Trojan. Using the R3c client, attackers can gain unauthorized access to the host computer and execute malicious operations.
Extended Description
R3C is a backdoor Trojan that infects Windows operating systems. It allows remote attackers to take control of the infected host.
Short Name
TROJAN:MISC:R3C-SERV-RESP
Severity
Major
Recommended
False
Recommended Action
Drop
Category
TROJAN
Keywords
CVE-1999-0660 Initial R3c Response Server
Release Date
01/09/2004
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
Port
TCP/9870
False Positive
Unknown
CVSS Score
8.8