How do I know if netbus is on my system? Could you point me into a direction of checking. Are there files in my windows folder to look for?
I've got some ports that are listening that causes me to suspect something.
thanks for your help
Get you a good nuker and take out the sumbitch.
Stupid script kiddie won't be doing to much if he has to explain to mommy and daddy why their internet service got canceled.
Vin Diesel has a fever.. and the only prescription is more cowbell.
Budiak: That girl I maced
Budiak: heh maced
Budiak: I wish
ShmrckPmp5: a good thing people can't fire guns through the computer...your ass would have been shot years ago
Y2A 47: youre smooth as hell
Y2A 47: thats why you get outta tickets, and into panties
galileo: you're a fucking beast and I hate you
assgrabbers are never subtile, they will grabb ass whereever they go,public or not, I know the type, because I am one. - Rock
how would I confirm it's even on my system?
Netbus typically works on ports 12345 and 12346. Use telnet and telnet to your local machine (127.0.0.1) on those ports. If you can access, the service is running.
If there's a possibility it's Back Orifice and not Netbus, then try telnetting to port 31337. (Clever huh...)
Last edited by Yaz; 08-11-2001 at 11:51 PM.
since it seems to me that we have some computer geeks here, , can someone tell me what this netbus thing is and what it does?
telnetted all three ports locally and got
"could not open a connection to 127.0.0.1"
If my firewall is blocking these sessions, does this mean they can't open these ports at their leisure? (still not sure if itís on here or not, I mean, they canít open these ports at will can they?)
I ran ďnetstat ĖaĒ and found some interesting things, that's what perked my curiosity in the first place. Not sure if there was a problem before I installed my firewall...
Still not sure exactly what going on here.
- If your firewall is set up correctly, they ain't touchin' jack.
- What did you find on your netstat -a?
And term, Netbus and Back Orifice are both Remote Administration tools. Essentially when they're on a machine anyone who knows the port/login has complete control of said machine.
get netbuster. It tells you when netbus is on your client and gets rid of it.
Netbus is such a cool program... hehe.
"They will spend their nights dreaming of six-pack
abs and a rock hard physique, little do they realize eventually we will reach
our goal and they will be dreaming of the body we walk around with every
dayÖonly then will they understand." -- Severed Ties
"There are 6 billion people in this world, and I'm #1." -- me
You don't even need Netbuster to remove Netbus. You can do it manually, heh.
Itís ok, I figured out what was happening. It's the internet call waiting that operates on a suspicious port. Why they decided to use that port Iím not so sure but thatís what it is. I donít like the idea of that port being open and will call them Monday to seek other options.
Thanks for your help everyone. I learned a lot during this also.
Good you got it sorted out
Sorry I got no clue on that stuff Although I guess I gotta learn as next week I am getting a fixed cable line in me house