Event ID - 21

Port No21
Service NameBack Construction
RFC Doc0
ProtocolTCP
DescriptionWorks on Windows 95 and 98.
Reference LinkBack Construction Trojan
AttackIt autoloads the Registry:
HU\Default\Software\Microsoft\Windows\CurrentVersion\Run\ HLM\SOFTWARE\Microsoft\General\Settings\

File :
Back12.zip - 374,919 bytes Back15.zip - 425,599 bytes Back21.zip - 431,945 bytes Back25.zip - 447,210 bytes Client.exe - 208,896 bytes Client.exe - 258,048 bytes Client.exe - 267,264 bytes Client.exe - 270,848 bytes Server.exe - 177,664 bytes Server.exe - 179,200 bytes Server.exe - 179,712 bytes Server.exe - 189,440 bytes Cmctl32.exe - Cmctl32.exe - Cmctl32.exe -

It does the following :
1.Remote Access
2. FTP server

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.