Event ID - 25

Port No25
Service NameMail Bomb Trojan
RFC Doc0
ProtocolTCP
DescriptionMail Bomb Trojan is what it name says. A mail bombing trojan.
Reference LinkMail Bomb TrojanTrojan
AttackIt autoloads the Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runservices\ Key: Explorer

It does the following :
Mail bombs someone

Removal :
1. Remove the Explorer key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Runservices Which can be done with regedit or any other registry editing program
2. Reboot the computer or close the trojan in the Explorer key.
3. Delete the trojan file in the Explorer key.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.