Event ID - 7308

Port No7308
Service NameNetmonitor
RFC Doc0
ProtocolTCP
DescriptionNetMonitor 1.0 is a trojan from 1999. NetMonitor comes with two servers. One server does not infect computers while the other does.
Reference LinkNetmonitor
AttackIt Autoloads: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Key: netspy

Features:

Download or upload file
Execute file
Get screen shot
Send message
Shutdown windows
View/close processes

Fix:
Remove the netspy key in the registry located at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Which can be done with regedit or any other registry editing program.
Reboot the computer or close netspy.exe.
Delete the trojan file netspy.exe in the windows system directory

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.