Event ID - 31338

Port No31338
Service NameDeep BO
RFC Doc0
ProtocolUDP
DescriptionWorks on Windows 95, 98 and NT.
Reference LinkDeep_BO
AttackRegisters:
HLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

Files:
Deepbo.exe - 530,432 bytes Melt.exe - 29,184 bytes .exe - Winsck.ocx - Windll.exe - Windll.dll -

Actions:
Remote Access
DeepBO is a modified client for Back Orifice. Spreads as one of two utilities: "Nonuke" and "ICQ Inhancer".

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.