Signature Detail

TROJAN: Oblivion Initial Server Response

This signature detects the initial server response from the Oblivion backdoor. Detecting this response indicates that your system is infected with the Oblivion backdoor Trojan. Using the Oblivion client, attackers can gain unauthorized access to the host computer and execute malicious operations.

Extended Description

Oblivion is a Trojan that infects Windows operating systems and allows attackers to take control of the victim host.

References

• CVE: CVE-1999-0660
• URL: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.oblivion.html
• URL: http://www.sophos.com/virusinfo/analyses/trojoblivionb.html
• URL: http://www.pestpatrol.com/pestinfo/b/backdoor_oblivion.asp