Event ID - 172

Port No172
Service NameTrojan.PSW
RFC Doc0
ProtocolTCP
DescriptionThis backdoor hacking tool collects possible passwords and other information required for Internet connection. It sends the collected information to the backdoor program author via the Internet
Reference LinkTrojan.PSW
AttackSolutions:

Click Start>Run, type Regedit then hit the Enter key.
In the left panel, double click the following:
Hkey_Local_Machine>Software>Microsoft>Window
>CurrentVersion>RunServices>MSSystemset
Look for and then delete this registry entry:
msset32.exe

Scan your system with Trend Micro antivirus and delete all files detected as BKDR_PSW.HCKPASS. To do this, Trend Micro customers must download the latest pattern file and scan their system. Other email users may use HouseCall

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.