Signature Detail
Short Name |
SPYWARE:TROJAN:HTTPRAT |
|---|---|
Severity |
Critical |
Recommended |
No |
Recommended Action |
Drop |
Category |
SPYWARE |
Keywords |
Spyware Trojan HTTPRat |
Release Date |
2005/05/02 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SPYWARE: HTTPRat
This signature detects the runtime behavior of HTTPRat, a Trojan program. This spyware enables remote attackers to create the backdoor executable Zombam.B, which attempts to terminate antivirus and firewall processes running on the infected host. Remote attackers can then use a Web browser to access the infected host.
Extended Description
None
References