Event ID - 21

Port No21
Service NameLil Witch FTP
RFC Doc0
ProtocolTCP
DescriptionThis is a simple ftp server, possibly to be used in conjunction with the Littlewitch remote access trojan. This trojan originates from central America.
Reference LinkLil Witch FTP Trojan
AttackIt does the following :
FTP server

Removal :
1.Delete c:\explorer.exe.
2. Reboot computer.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.