Intrusion Prevention



This indicates that a system might be infected by BandarChor Botnet.
BandarChor is a ransomware. It will encrypt important files on the victims system and will only provide a password to recover encrypted files after paying a certain amount to the owner.

Affected Products

Any unprotected Windows system is vulnerable to the attack.


System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

If required, the signature's action can be set to "Block".
Please use Anti-Virus software to scan and clean the infected devices.