Event ID - 31339

Port No31339
Service NameNetSpy DK
RFC Doc0
ProtocolTCP
DescriptionWorks on Windows 95, 98 and NT.
Reference LinkNetSpy_DK
AttackRegisters:
HCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Files:
Netspy.zip - Netspy10.zip - 19,931 bytes Netspy20.zip - 221,785 bytes Netspy2000.zip - 1,181,366 bytes Procmon.zip - 5,978 bytes Spyserver.zip - 11,570 bytes Client.exe - 44,544 bytes Client.exe - 59,392 bytes Client.exe - 63,936 bytes Client.exe - 71,740 bytes Client.exe - 1,789,688 bytes Sp_client.exe - Server.exe - 25,088 bytes Server.exe - 31,744 bytes Server.exe - 36,970 bytes Server.exe - 1,821,944 bytes Sysprotect.exe - Netspy.exe - 147,968 bytes Netmonitor.exe - 313,856 bytes Procmonexe - 14,848 bytes Spyserver.exe - 30,720 bytes Zip.dll - 130,048 bytes System.exe -

Actions:
Remote Access / Steals passwords

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.