Event ID - 25123

Port No25123
Service NameGoy
RFC Doc0
ProtocolTCP
DescriptionGoy Z TroJaN is a simple FTP trojan. It is normally distrubted as a 632 kilobyte install shield progam. Once the program is done installing it displays a fake error message and then the server is running in the background
Reference LinkMore Information
AttackName:Goy'Z TroJan

Manual removal:
1. Remove the (Default) key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunSerices Which can be done with regedit or any other registry editing program.
2. Reboot the computer or close Cmmlo32.exe.
3. Delete the trojan file Cmmlo32.exe in the windows system directory.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.