Event ID - 6712

Port No6712
Service NameFunny trojan
RFC Doc0
ProtocolTCP
DescriptionFunny Trojan is a French trojan. So, we could not understand all of the features. The server is written in assembly which is why it's 5.5K. The whole package comes with the server, a exe infector, a remover and two joke programs. The first joke program, Californ.exe makes all the windows on the screen shake and move around. Just close the program to stop it. The second program, gravedad.exe displays a picture of the screen flipped. Just click on the screen to remove the picture.
Reference LinkFunny trojan Trojan
AttackIt autoloads the Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ Key: tasknet

It does the following :
Open/close Cd-Rom
Control mouse
Control sound
Send message

Removal :
1.Remove the tasknet key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Which can be done with regedit or any other registry editing program.
2.Reboot the computer or close tasknet.exe.
3. Delete the trojan file tasknet.exe in the windows directory

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.