TROJAN: NetBus Pro Server Response
This signature detects TCP packets sent from local server port 20034 to a remote port. This can indicate the system is responding to a Netbus Pro user. NetBus Pro, a remote administration tool based on the Trojan NetBus, allows users to access data on remote Microsoft Windows systems. NOTE: NetBus Pro is a legitimate remote administration tool and all actions are visible to the server.
Extended Description
Trojan NetBus Pro enables an attacker to take complete remote control of an infected system.
Short Name
TROJAN:NETBUS:PRO-SERVER-RES
Severity
Minor
Recommended
False
Recommended Action
None
Category
TROJAN
Keywords
CVE-1999-0660 NetBus Pro Response Server
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
Port
TCP/20034
False Positive
Unknown
CVSS Score
8.8