Re: [inet-admins] NetBus

[freelsd@telekom.ru]

On Wed, Nov 04, 1998 at 06:51:58PM +0300, Ilya Shulman wrote:
> ÷ÓÅÍ ÐÒÉ×ÅÔ,
> 
> Á ËÔÏ-ÎÉÔØ ÓÌÙÛÁÌ ÐÒÏ NetBus ? ÓÕÄÑ ÐÏ ×ÓÅÍÕ, ÛÔÕËÁ ÐÏÈÏÖÁ ÎÁ
> BO ..
12345/tcp, 12346/tcp

http://161.53.42.3/~crv/security/bugs/NT/backdoor.html

---cut---
There two ways to remove NetBus, depending on what version you
    use:

        - For  versions 1.5x,  the instructions  to remove  NetBus are
          located at http://members.spree.com/NetBus/remove_1.html
        - For   version  1.6,   the  removal   instructions  are    at
          http://members.spree.com/NetBus/remove_2.html.     You   can
          remove any installation  of NetBus 1.6  by telneting to  the
          machine at port 12345, typing 'Password;1;', pressing enter,
          typing 'RemoveServer;1',  and pressing  enter.   You will be
          disconnected, NetBus will be disabled and will longer run at
          startup.  You will have to delete Patch.exe from you Windows
          directory if  you want  to completely  remove NetBus.   This
          procedure works even if there is a password set, however  it
          doesn't work with the 1.5x versions.

...

dimka

=============================================================================
"inet-admins" Internet access mailing list. Maintained by East Connection ISP.
Mail "unsubscribe inet-admins" to Majordomo@info.east.ru if you want to quit.
Archive is accessible on http://info.east.ru/rus/inetadm.html