Trojan Zoo @EHugin

Quick Links
Trojan Zoo   Security @EHugin
BackOrifice

Additional Info:


Current Exhibits:

Sub7
Back Orifice
Hack'a'Tack

BackOrifice: Server Information

Netstat Screen Shots

Below are two screen shots showing the output of the Windows "netstat -an" command. The first shot was taken prior to installing the BackOrifice server, and shows a typical Win98 system...the only ports in use are the netbios ports. The second screen shot shows the same command's output after the trojan server is installed. As you can see, both TCP and UDP ports 31337 are in use now.

BALDR's netstat output before BackOrifice
BALDR's netstat output before BackOrifice


BALDR's netstat output with BackOrifice
BALDR's netstat output with BackOrifice