Event ID - 6006

Port No6006
Service NameBad Blood
RFC Doc0
ProtocolTCP
DescriptionWorks on Windows 95 and 98 (maybe on NT), together with MS Outlook Express.
Reference LinkBad Blood Trojan
AttackIt does the following :
Remote Access / Mail trojan Bad Blood is capable of communication with two other trojans: The thing on port 6006, with the password "badblood" och the Subseven on port 27374. SubSevens port is a defualt one, but port 6006 is new.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.