Event ID - 1010

Port No1010
Service NameDoly Trojan
RFC Doc0
ProtocolTCP
DescriptionWorks on Windows 95, 98 and NT. Please note that not all versions work on NT. Dhacker.exe is a Doly 1.6 password cracker and Vbrun60.exe is only needed if you want to run it (written in Visual Basic 6). Master Password for versions 1.6 and 1.7 is ""Sarit"".
Reference LinkDoly Trojan Trojan
AttackIt autoloads the Registry:
HCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ HLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ HKEY_USER\.Default\Software\Marabilis\ICQ\Agent\Apps\

It does the following :
1. Remote Access / Keylogger / IRC trojan
2. Doly is hidden in several different programs: in Memory Manager, in an Interactive Game, and in a Downloading program. The trojan also starts using Windows Startup Directory.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.