Event ID - 12223

Port No12223
Service NameHack 99 keylogger
RFC Doc0
ProtocolTCP
DescriptionThe Logger has a simple gui with 2 modes: normal and realtime.
Reference LinkHack 99 keylogger Trojan
AttackIt autoloads the Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices Key: HKeyLog

It does the following :
Simple Keylogger

Removal :
1.Remove the HKeyLog key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices. This can be done with regedit or any other registry editing program.
2. Reboot the computer or close the trojan.
3. Delete the trojan file HKeyLog.exe in the windows system directory.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.