Event ID - 13370

Port No13370
Service NameSpArTa
RFC Doc0
ProtocolTCP
DescriptionBackdoor.Sparta is a Trojan horse that allows unauthorized access to the infected computer. This Trojan also attempts to remove several major brands of firewall and antivirus protection, including Norton AntiVirus
Reference LinkMore Information
AttackName:SpArTa

Removal depends on whether Norton AntiVirus (NAV) is functioning properly:

If NAV is functioning properly: Update the virus definitions, run a full system scan, and delete all files that are detected as Backdoor.Sparta. Delete the value
Spfilefrom the registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsCurrentVersion\Run

If NAV is not functioning properly:
Delete \Windows\%System%\Rundll32b.exe.
Delete the value Spfile
from the registry key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsCurrentVersion\Run
Reinstall NAV, update the definitions, and run a full system scan

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.