| Port No | 1025 |
| Service Name | NetSpy |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | NetSpy 0.6.98 Build A is made to look like an installer for SysProtect 98. It is able to encrypt transfers between the client and server. This trojan is from 1998 and probably is not used anymore |
| Reference Link | |
| Attack | It Autoloads: Registry: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Key: SysProtect
Features: File manager Hide/show start menu Hide/show task bar Shutdown computer Sleep Fix: Remove the SysProtect key in the registry located at HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Which can be done with regedit or any other registry editing program. Reboot the computer or close system.exe. Delete the trojan file system.exe in the windows system directory |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.