| Port No | 9000 |
| Service Name | W32.Randex.CZZ |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | W32.Randex.CZZ is a network-aware worm that will attempt to connect to a predetermined IRC server to receive instructions from a remote attacker. |
| Reference Link | Port Number:9000 Service Name:W32.Randex.CZZ Port:TCP |
| Attack | According to Symantec The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines. 1.Disable System Restore (Windows Me/XP). 2.Update the virus definitions. 3.Run a full system scan and delete all the files detected as W32.Randex.CZZ. 4.Delete the value that was added to the registry. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.