| Port No | 13013 |
| Service Name | PsychWard |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | Works on Windows 95, 98, ME and NT, together with mIRC and ICQ. |
| Reference Link | PsychWard |
| Attack | Registers: HLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Files: Psychward.zip - 524,509 bytes Psychward_big.zip - 490,146 bytes Psychward01.zip - 519,278 bytes Psychwardr01.zip - 519,278 bytes Psychwardr02.zip - 528,631 bytes Psychwardr03.zip - 529,364 bytes Psychward03.b.zip - Pwclient.exe - 285,184 bytes Pwclient.exe - 294,400 bytes Pwclient.exe - 294,912 bytes Pwclient.exe - 595,456 bytes Pwclient.exe - 632,320 bytes Pwmodify.exe - 122,880 bytes Pwmodify.exe - 237,056 bytes Pwmodify.exe - 239,616 bytes Pwmodify.exe - 299,008 bytes Pwmodify.dat - 68 bytes Pwserver.exe - 6,656 bytes Pwserver.exe - 8,192 bytes Pwserver.exe - 17,952 bytes Pwserver.exe - 18,976 bytes Pwserver.exe - 22,048 bytes Pwserver.exe - 61,440 bytes Win98nuke.exe - 50,728 bytes 2ascii.bin - 30,995 bytes Stat.exe- 22,048 bytes Statexe.zip - 22,320 bytes Actions: Remote Access / ICQ trojan / IRC trojan |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.