Event ID - 1568

Port No1568
Service NameRemote Hack
RFC Doc0
ProtocolTCP
DescriptionRemote Hack 1.0 a trojan from Brazil It does come with a telnet client which may be used to connect
Reference LinkRemote Hack
AttackIt Autoloads: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Key: Norton Anti Virus

Features:

CTRL-ALT-DEL on/off
Open/close Cd-Rom
Start button on/off
Task bar on/off

Fix:
Remove the Norton Anti Virus key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Which can be done with regedit or any other registry editing program.
Reboot the computer or close Norton.exe.
Delete the trojan file Norton.exe in the windows directory

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.