Event ID - 22222

Port No22222
Service NameDonaldDick
RFC Doc0
ProtocolTCP
DescriptionA Trojan is a program that enables an attacker to get nearly complete control over an infected PC. Frequently used by as a tool by malicious hackers. When this program executes, the program performs a specific set of actions. This usually works toward the goal of allowing the trojan to survive on a system and open up a backdoor.
Reference LinkMore Information
AttackName:DonaldDick

Backdoor Donald Dick 1.52 is a Trojan that opens up a backdoor program that, once installed on a system, permits unauthorized users to remotely extract passwords, edit the registry, log keystrokes, etc. Donald Dick runs from the server file "c:\WINDOWS\SYSTEM\pnpmgr.pci" over the ports 23476 and 23477 via TCP.

Removal tools: List of products that detect/remove/protect against Donald Dick 1.53:
1. X-Cleaner
2. RTGuardian
3. Greynet Enterprise Manager

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.