Absolutely. I have seen this port come up on scans hundreds of times and only a very few end up being NetBus.
Rick -----Original Message----- From: sanja madan [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 07, 2002 8:33 AM To: [EMAIL PROTECTED]; ASBB11 Cc: [EMAIL PROTECTED] Subject: Re: port 12345 windows95/nt Hi Do a simple telnet to the <IP port> What output do u get ?? If u have NetBus it is likely to Give u an output which normally shows the NetBus version number. Trend micro returns 'trend micro client' or something similar. As suggested earlier do a search in google. There are some Registry settings u need to check too. Dont jump to conclusions that its NetBus. Regards sok --- [EMAIL PROTECTED] wrote: > On Mon, Feb 04, 2002 at 04:18:15PM +0000, ASBB11 > wrote: > > Using superscan I found this port open on my > computer. How can I > close > > it? I use sygate personal firewall but it looks > like I do not have > > options to shut down ports, I can only act on > protocols. > > if i recall correctly, that port is commonly used by > a trojan called > netbus. it allows attackers to control your > computer remotely and do > nasty things. > > -- > ____________________}John > Flinchbaugh{______________________ > | [EMAIL PROTECTED] > http://www.hjsoft.com/~glynis/ | > ~~Powered by Linux: Reboots are for hardware > upgrades only~~ > > ATTACHMENT part 2 application/pgp-signature __________________________________________________ Do You Yahoo!? Send FREE Valentine eCards with Yahoo! Greetings! http://greetings.yahoo.com
