Signature Detail

TROJAN: Son-of-PsychWard Initial Server Response

This signature detects the initial server response from the Son-of-PsychWard Trojan. Detecting the initial response could indicate that the server is infected with the Pitfall Trojan. A successful attack can allow an attacker to take control of the infected system.

Extended Description

Son-of-PsychWard is a backdoor Trojan that infects Windows operating systems. It allows remote attackers to take control of the infected host.

References

• CVE: CVE-1999-0660
• URL: http://spyware.pcwash.com/trojans/tr_data/y3104.html
• URL: http://www.glocksoft.com/trojan_list/Son_of_PsychWard.htm
• URL: http://www.cybervzhn.com/trojans/tr_data/y1600.html