| Port No | 65000 |
| Service Name | TROJ_BACKDOOR |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | This is also known as NetBus Pro version 2.0. It is a remote administration and monitoring program, which could be used by a hacker to gain full access to a remote computer. It is not executed automatically without the user’s knowledge. It does however, have some downloadable hacking versions that can be installed on a system without being detected. |
| Reference Link | <TROJ_BACKDOOR |
| Attack | Solution MANUAL REMOVAL INSTRUCTIONS To remove the backdoor program, click Start>Run, type Regedit then hit the Enter key. Double click the following: HKEY_LOCAL_MACHINES>Software > Microsoft >Windows>CurrentVersion>RunServices Look for and then delete the "NetBus Server Pro" key Close regedit Reboot your system. Scan your system with Trend antivirus software and delete all files detected as BKDR_NBSPY.B. To do this Trend customers must download the latest pattern file and scan their system. Other email users may use Trend HouseCall, a free online virus scanner. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.