Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Trojan/Backdoor - Warbot Detection

Critical

Synopsis

The remote host has been compromised and is running a 'Backdoor' program

Description

A host is making HTTP requests that are formatted as a Warbot command would be. This is indicitive of an infection by the Warbot trojan. The Warbot trojan allows for arbitrary code to be executed on the system, as well as enables it to be used in various DDoS attacks.

Solution

Update your Antivirus and perform a full scan of the remote operating system.