TCP Port 3410

Common Use

Used by the OptixPro Trojan.

Inbound Traffic

OptixPro is a powerful trojan written in Delphi which can give a remote user pretty well total control of a system.  OptixPro can also disable a number of Anti-Virus and personal firewalls as well.  You should ensure that all inbound TCP Port 3410 traffic is blocked by your firewall.  The common infection method is via virus payload or P2P shared files.

Outbound Traffic

Outbound scans if occurring in volume should be considered an indication of a possible infection or compromise on the source computer and should be investigated immediately.

Additional Information

PortPeeker TCP port 3410 Captures

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.optixpro.13.html

Page last updated on February 09, 2004