![]() |
![]() |
||||||
![]() |
![]() |
![]() |
![]() |
![]() |
|||
![]() |
![]() |
Home | About Us | Contact Us | Threats to your Security on the Internet | Products | Support | Online Store |
![]() |
||||
![]() |
![]() RCT's & RAT's What are they? How do I detect them? How many are there? What ports do they use? How do I Remove? Acid Shivers Acid Shivers (modified) Back Orifice Baron Knight Big Gluck Blade Runner Bugs Deep Back Orifice Delta Source Devil Doly Trojan Deep Throat Deep Throat v2 Executer v1 Executer v2 Girlfriend Hack 'a' Tack Master's Paradise NetBus NetBus 2 Pro NetSphere Sockets 'de Troie SubSeven (Sub7) Whack-a-mole (NetBus) WinCrash Additional Resources Latest News Recommended Books Recommended Links Recommended Software |
![]() |
NetBus currently affects Windows 95/98 PC's and Windows NT PC's. The "server" portion (typically named "patch.exe") is approximately 470kb in size. Ports 12345 and 12346 (by default) are used to establish its connection between the "client" and "server". Once installed, it is rerun every time the computer is started by means of an entry under the "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" branch in the Registry. Who is Responsible?NetBus was written by Carl-Fredrik Neikter (cf@trancometer.se), a Swedish programmer. And although unsure of what Carl's intentions were when he created it, he states that it was created purely for fun. Below are some of the functions that NetBus offers: Provided below, is a picture of what the "client" portion of the software looks like. It's what the remote user would use to control your system. What could be easier than "pointing and clicking" your way through another users PC? How to RemoveSeveral steps involve working within the Windows 95/98 or Windows NT registry. And although the steps are easy, I cannot be held responsible if a mistake is made. Please use caution. Step 1. Step 2. Step 3. If you do not find a file called "patch.exe", it means that the server portion was renamed to something else. What you will need to do, is open Explorer and go to the WINNT\SYSTEM32 directory (if using NT) or the WINDOWS\SYSTEM directory (if using Windows 95/98). Find each of the files that were referenced within the right window of regedit. When you find the file that's approximately 470kb in size. You've found the renamed server portion of NetBus. Step 4. Step 5. If the file is determined to be have been named to something different, type whatever the name is with the "/remove" switch. Step 6. Step 7. Step 8. Congratulations, NetBus has been removed from your system.
|
||||
![]() |
![]() |
![]() |
|||||
![]() |
©
Copyright Commodon Communications. All rights reserved. |
![]() |