Ask The Trades - Print Page

Ask The Trades
https://www.askthetrades.co.uk/cgi-bin/yabb/YaBB.pl DIY Forum >> Alarms, Phones, Aerials, CCTV & Datacomms >> netbus trojan https://www.askthetrades.co.uk/cgi-bin/yabb/YaBB.pl?num=1098734522 Message started by trowelhead on Oct 25^th, 2004, 9:02pm

Title: netbus trojan
Post by trowelhead on Oct 25^th, 2004, 9:02pm

I don't know if this is the right place to ask,but here goes.
In the last 4 hours the netbus trojan (whatever that is :-[) has 'attacked' my pc over 200 times,luckily the norton anti virus has stopped so far.
What is causing this and should i be worried about it?
Can i do anything about it or should i forget about it and stop worrying?

thanks lads.

Title: Re: netbus trojan
Post by supersparky on Oct 25^th, 2004, 9:05pm

downloaded anything recently?
if your ip is dynamic try disconnecting/ re connecting and run a virus scan

ss

Title: Re: netbus trojan
Post by Dewy on Oct 25^th, 2004, 9:06pm

From the Cleaner database.

Netbus:
Created: August 13, 1999 Modified: December 14, 2003
Type: Client/Server

NetBus can find cached passwords, has full control over all windows, can capture video from a video input device, has a scheduler to run scripts on specified hosts at a certain time, and support for plugins.

Ports used are 12345, 12456 or 20034tcp.

Now you know what netbus does. :(

If you havent got a trojan cleaner try the housecalls online antivirus scanner which often picks up tojans that others miss.
http://housecall.antivirus.com/housecall/start_corp.asp

Title: Re: netbus trojan
Post by thescruff on Oct 25^th, 2004, 9:42pm

Its common for the virus to attach itself to emails.

if you had it through this source and it was deleted, make sure you delete the deleted box.

then run a check my computer with your anti virus prog.

Then send me an email, it will soon show up.

scruff

Title: Re: netbus trojan
Post by HandyMac on Oct 25^th, 2004, 9:44pm

A decent firewall should take care of it as well - the ports that this trojan uses can be blocked off.

I have a hardware firewall here - a Netgear FVS318. I just let it get on with life 'cos it locks everything down unless you specifically open it up. I regularly get reports from it advising something nasty has been trying to get in, out, wave it all about.

I also have wall to wall AV as well.

Andrew