Event ID - 171

Port No171
Service Namemultiplex
RFC Doc0
ProtocolTCP
DescriptionNetwork Innovations Multiplex
Reference LinkMore Information
AttackName:A-Trojan (1.5)

A-Trojan 1.5 is a Portuguese trojan. We had to translate the client with a online service so it may not be correct. This trojan does have a few destructive features such as deleting critical files.

How To Remove :
1. Remove the Rundll16 key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Which can be done with regedit or any other registry editing program.
2. Reboot the computer or close rundll16.exe.
3. Delete the trojan file rundll16.exe in the windows directory and MdiHole.exe, MsDecay.scr, Msvsrv.exe and watching.dll in the windows system directory.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.