How does opening port 12345 fight off netbus? I thought that port 12345 is the auto-update port that trend listens on for its server calls.
Blevins -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, February 04, 2002 10:28 AM To: ASBB11 Cc: [EMAIL PROTECTED] Subject: Rif: port 12345 windows95/nt > Using superscan I found this port open on my computer. How can I close it? Port 12345 is used by the NETBUS trojan, so perhaps that trojan is active on your computer. Have a look at: http://www.robertgraham.com/pubs/firewall-seen.html On the other hand, some anti-virus programs, like Trend Officescan, open that port to fight off Netbus. If the Sygate documentation gives no answer, you could try to restart your computer without Sygate, and test if the port is still open. If you are infected by Netbus, you may want to get rid of it using "The Cleaner": http://www.moosoft.com/intro.php Let us know: I lost a night of sleep after finding port 12345 open, and before I found, that in my case, it was harmless. Ciao! Remo Cornali
