| Port No | 12345 |
| Service Name | Whack Job |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | Works on Windows 95, 98 and NT. The password is "ecoli". |
| Reference Link | Whack Job Trojan |
| Attack | It autoloads the Registry: HLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices It does the following : 1. Remote Access. 2.Trojan dropper Disguised as a fake game and installs a NetBus Pro server. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.