| Port No | 25386 |
| Service Name | MoonPie |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | MoonPie 1.3 is a german trojan. This version now has a edit server program. This edit server program allows the "hacker" to be notified via email when the server comes online. |
| Reference Link | More Information |
| Attack | Name:Moonpie Manual removal: 1. Remove the WinSys key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Which can be done with regedit or any other registry editing program. 2. Reboot the computer or close winsys.exe. 3. Delete the trojan file winsys.exe in the windows system directory if it exists. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.