Signature Detail
Short Name |
SPYWARE:RAT:AMITIS |
|---|---|
Severity |
Critical |
Recommended |
No |
Recommended Action |
Drop |
Category |
SPYWARE |
Keywords |
Spyware Remote Administration Tool Amitis |
Release Date |
2005/04/01 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SPYWARE: Amitis
This signature detects the runtime behavior of the spyware Amitis, a remote administration tool. After infecting a host (the Amitis server is installed and running), this spyware enables remote attackers to completely control the host. Attackers can perform such activities as downloading and uploading files, rebooting or shutting down Windows, viewing or modifying registry keys, and viewing or killing processes.
Extended Description
None
References