Event ID - 4201

Port No4201
Service NameWar trojan
RFC Doc0
ProtocolTCP
DescriptionAVAILABLE IN DATABASE This backdoor malware, called War Trojan, allows a remote hacker access to a target computer.
Reference LinkWAR TROJON
AttackSolution:
Scan your system with Trend Micro antivirus and note down the complete path and filename of the file detected as BKDR_WAR.B.
Click Start>Run, type Regedit then hit the Enter key.
In the left panel, double click the following:
HKEY_CURRENT_USER>Software>Microsoft
>Windows>CurrentVersion>Run
In the right panel, look for and then delete the registry entry that contains the file detected as BKDR_WAR.B. The entry may be in the following. For the server program filename, use your list in step 1:
Kernel32
In the left panel, double click the following:
HKEY_USERS>.DEFAULT>Software>Microsoft
>Windows>CurrentVersion>Run
In the right panel, look for and then delete the registry entry that contains the file detected as BKDR_WAR.B. The entry may be in the following. For the server program filename, use your notes in step 1:
Kernel32
Scan your system with Trend Micro antivirus and delete all files detected as BKDR_WAR.B. To do this Trend Micro customers must download the latest pattern file and scan their system. Other email users may use HouseCall

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.