TROJAN: Net Devil Initial Server Response

This signature detects the initial server response from the Net Devil backdoor. Detecting this response indicates that your system is infected with the Net Devil backdoor Trojan. Using the Net Devil client, attackers can gain unauthorized access to the host computer and execute malicious operations.

Extended Description

Net Devil is a Trojan that infects Microsoft Windows operating systems and allows attackers to take control of the victim host.

Short Name
TROJAN:NETDEVIL:NETDEVIL-STC
Severity
Major
Recommended
False
Recommended Action
Drop
Category
TROJAN
Keywords
CVE-1999-0660 Devil Initial Net Response Server
Release Date
01/22/2004
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
Port
TCP/901,6667
False Positive
Unknown
CVSS Score

8.8

Found a potential security threat?