Sonicwall Signatures

Application: Zook

Zook is a Korea based software solution for remote access to your PC. It uses the RFB (Remote Frame Buffer) to create a VNC (Virtual Network Connection) to the PC. This is similar to Windows Remote Desktop Protocol. Zook also uses RFB, so SID 184, "Remote Frame Buffer (VNC) -- Connection Attempt" is also required to identify traffic from this application.