Event ID - 3700

Port No3700
Service NamePortal of Doom
RFC Doc0
ProtocolTCP
DescriptionPortal of Doom V.3 is a old trojan made by the old Hack City. This is a beta version of the trojan. Our version did not write to the registry, but it is suppose to
Reference LinkPortal of Doom
AttackIt Autoloads: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\ Key: String

Features:

Beep
File explorer
File manager
Hide task bar
Key logger
Kill/Show windows
Move mouse
Open file
Open/Close Cd-Rom
Red box
Screen saver
Send text
Shutdown
Steal passwords
Sticky caps
Swap mouse buttons

Fix:
Remove the String key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices Which can be done with regedit or any other registry editing program. Reboot the computer or close ljsgz.exe. Delete the trojan file ljsgz.exe in the windows system directory.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.