| Port No | 3777 |
| Service Name | Psychward |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | Psychward is an average trojan that can be pre configured before sending. This version is probably not used much due to the more recent and smaller versions |
| Reference Link | href="http://www.dark-e.com/archive/trojans/psychward/big/index.shtml"target="_blank">Psychward |
| Attack | Autloads: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ Key: WinCore Features: Get system info Get win dir Server can be pre configured (ICQ notify) Trace/ping Upload/Download file View dir View/Kill processes e Fix: Remove the WinCore key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Which can be done with regedit or any other registry editing program Reboot the computer or close the trojan file listed in the registry. Delete the trojan file listed in the registry. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.