Home / malware

PDF

HackTool:Win32/Tsredir.A

First posted on 04 November 2010.
Source: SecurityHome

Aliases :

HackTool:Win32/Tsredir.A is also known as Win-AppCare/HackTool.19651 (AhnLab).

Explanation :

HackTool:Win32/Tsredir.A is a tool used within a command-line interface to disable Internet Information Services (IIS) and redirect Terminal Server (TS) or Remote Desktop traffic to TCP port 80.
Top

HackTool:Win32/Tsredir.A is a tool used within a command-line interface to disable Internet Information Services (IIS) and redirect Terminal Server (TS) or Remote Desktop traffic to TCP port 80. Using TCP port 80 allows a machine to be remotely accessible through via HTTP protocol if firewall rules prevent communication through any other ports.

Analysis by Vincent Tiu

Last update 04 November 2010

 

TOP