I can't find this "BOT: TDSS.C Trojan Traffic Detected" in our threat db

[paloalto.netfos]

Hi all,

We found this threat"BOT: TDSS.C Trojan Traffic Detected" on 3rd party's IPS(McAfee) deivce,but i can't find this event on Paloalto Threat DB.

Have anyone ever face same problem? Or have other solution can protect this attack ?

Regards,

Jim

[ppatel]

Hi Jim,

We do have protection against the TDSS trojan but there are always chances that our threat database would be missing some information.

If you go to the url : https://threatvault.paloaltonetworks.com/   and search wit the keyword "tdss.c" you will find the list of threats:

Sample screen shot below:-

If you do not find this under threat, I would highly recommend to open a support ticket with all the possible information requested in the following DOC as applicable. Client pcap and the related traffic log would be the best in this case.

https://live.paloaltonetworks.com/docs/DOC-2769

Regards

Parth

[paloalto.netfos]

Hi Parth,

Thanks your fast reply,but paloalto seems can't find this event .

I will try to do a packet capture and open case.

Regards,

Jim

[sdurga]

Can you please provide a link through which you can generate this threat, so that I can test this on my side.

Thanks,

Sandeep T