Event ID - 45632

Port No45632
Service NameLittle Witch
RFC Doc0
ProtocolTCP
DescriptionMalware ("malicious software") consists of software with clearly malicious, hostile, or harmful functionality or behavior and that is used to compromise and endanger individual PCs as well as entire networks.
Reference LinkMore INformation
AttackName:Little Witch

Little Witch Removal Instructions

1. Kill the following processes
backdoor.littlewitch.61.o.exe, lwclient.exe, lwclient5.1.exe, lwclient5.2.exe, lwclient5.3.exe, lwserver.exe, lwserver_full5.1.exe, lwserver_full5.2.exe, lwserver_full5.3.exe, miniserver.exe, miniserver10.exe, miniserver12.exe, miniserver17.exe, miniserver18.exe, miniserver2.exe, miniserver20.exe, miniserver22.exe, miniserver3.exe, miniserver4.exe, miniserver6.exe, miniserver7.exe, remover2.0.exe

2. Remove the following files
backdoor.littlewitch.61.o.exe, leeme.txt, lwclient.exe, lwclient5.1.exe, lwclient5.2.exe, lwclient5.3.exe, lwserver.exe, lwserver_full5.1.exe, lwserver_full5.2.exe, lwserver_full5.3.exe, miniserver.exe, miniserver10.exe, miniserver12.exe, miniserver17.exe, miniserver18.exe, miniserver2.exe, miniserver20.exe, miniserver22.exe, miniserver3.exe, miniserver4.exe, miniserver6.exe, miniserver7.exe, news.txt, novedades.html, remover2.0.exe.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.