Event ID - 12310

Port No12310
Service NamePrecursor
RFC Doc0
ProtocolTCP
DescriptionPrecursor 1.0 is a trojan from 1999. There are a lot of AOL commands, which probably do not work since AOL has been updated.
Reference LinkPrecursor
AttackIt Autoloads: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Key: Precursor Server

Features:

AIM commands
AOL commands
Change wallpaper
Disable/enable CTRL-ALT-DEL
File manager
Get screen shot
Monitor on/off
Open/close CD-Rom
Run program
Show picture
Start screen saver
Swap mouse buttons

Fix:
Remember the file path in the Precursor server key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run and then remove the Precursor server key. Which can be done with regedit or any other registry editing program.
Reboot the computer or close the trojan file listed in the registry.
Delete the trojan file listed in the registry.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.