Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Trojan/Backdoor Detection - Sasser Worm

Critical

Synopsis

The remote host has a backdoor installed

Description

The remote host is infected with the Sasser Worm. This worm utilizes a backdoor command server and FTP server on ports 5554 and 9996, respectively.

Solution

Use an anti-virus product to remove the worm and consider re-installing the operating system.