| Port No | 5401 |
| Service Name | Back Construction |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | Works on Windows 95 and 98. |
| Reference Link | Back Construction Trojan |
| Attack | It autoloads the Registry: HU\Default\Software\Microsoft\Windows\CurrentVersion\Run\ HLM\SOFTWARE\Microsoft\General\Settings\ File : Back12.zip - 374,919 bytes Back15.zip - 425,599 bytes Back21.zip - 431,945 bytes Back25.zip - 447,210 bytes Client.exe - 208,896 bytes Client.exe - 258,048 bytes Client.exe - 267,264 bytes Client.exe - 270,848 bytes Server.exe - 177,664 bytes Server.exe - 179,200 bytes Server.exe - 179,712 bytes Server.exe - 189,440 bytes Cmctl32.exe - Cmctl32.exe - Cmctl32.exe - It does the following : 1.Remote Access 2. FTP server |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.