| Port No | 1967 |
| Service Name | WM FTP Server |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | WM FTP Server is a Delphi FTP server. The trojan listens on port 1967 and allows anyone to connect with a FTP client |
| Reference Link | WM FTP Server |
| Attack | Autoloads: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Key: Microsoft Corporation
Features: FTP server Fix: Remove the GetRightKey key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Which can be done with regedit or any other registry editing program. Reboot the computer or close IMAGEM.EXE. Delete the trojan file IMAGEM.EXE in the windows system directory |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.