Signature Detail

TROJAN: PsychWard Initial Server Response

This signature detects the initial server response from a PsychWard backdoor. Detecting this response indicates that your system is infected with the PsychWard backdoor Trojan. Using the PsychWard client, attackers can gain unauthorized access to the host computer and execute malicious operations.

Extended Description

PsychWard is a backdoor Trojan that infects Microsoft Windows operating systems. It allows a remote attacker to take control of the infected host.

References

• CVE: CVE-1999-0660
• URL: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.psychward.html
• URL: http://www.pestpatrol.com/PestInfo/P/PsychWard.asp