| Port No | 17166 |
| Service Name | Mosaic |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | Mosaic 2.00 is a foreign trojan written in Visual Basic. Not much to say about it. It appears to have basic features. |
| Reference Link | Mosaic Trojan |
| Attack | It autoloads the Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\ Key: Mosaic It does the following : Chat Execute Ftp server Open/Close Cd-Rom Send keys View/Close processes Removal : 1.Remove the Mosaic key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices. Which can be done with regedit or any other registry editing program. 2. Reboot the computer or close MOSAIC.EXE. 3. Delete the trojan file MOSAIC.EXE in the windows directory. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.