| Port No | 1000 |
| Service Name | Direct Connection |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | Works on Windows. |
| Reference Link | |
| Attack | It autoloads the Registry: HLM\Software\Microsoft\Windows\CurrentVersion\Run\ File : Directconnection1.0b3.zip - 1,267,463 bytes Server.exe - 272,398 bytes Client.exe - 318,976 bytes Editsvr.exe - 261,576 bytes Run.dll - 272,384 bytes Update.exe - 201,216 bytes Hello.exe - 737,280 bytes It does the following : Remote Access Puts up a box allagedly from the NSA, that the program will scan the hard disk for pirated software. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.