Signature Detail

TROJAN: Phase Zero Initial Server Response

This signature detects the initial server response from the Phase Zero Trojan. Detecting this response indicates that your system is infected with the Phase Zero backdoor Trojan. Using the Phase Zero client, attackers can gain unauthorized access to the host computer and execute malicious operations.

Extended Description

Phase Zero is a Trojan that infects Windows operating systems and allows a remote attacker to take control of the infected victim.

References

• CVE: CVE-1999-0660
• URL: http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453075695
• URL: http://www.juniper.net/security/auto/vulnerabilities/vuln1345.html
• URL: http://www.glocksoft.com/trojan_list/Phase_Zero_Phase_0.htm