Event ID - 60552

Port No60552
Service NameR0xr4t
RFC Doc0
ProtocolTCP
DescriptionRAT/R0xR4t 1.2 Mutant Version (b) is rat. Remote Administration Tool (RAT) is a software application which provides an attacker with the capability to control your computer system remotely whenever you are online. The attacker can perform operations such as programs and/or files adding/deleting, files transfers, capturing screenshot, etc. Attacker may use captured computer for different personal needs such as to send malicious attacks
Reference LinkMore Information
AttackName:R0xr4t

R0xr4t Removal Instructions

1. Kill the following processes
editserver.exe,
r0xr4t.exe,
server.exe

2. Remove the following files
editserver.exe,
icons.icl,
leiame.txt,
r0xr4t.exe,
server.exe.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.