Rcon trojan

[Owen Creger <OCreger () CreativeSolutions com>]

It appears one of our NT boxes has been compromised, and is running the rcon
trojan, port 8989
Does anyone know how to clean up the mess, or do I need to rebuild the box?

Owen C. Creger CCNA
Information Systems Security Engineer
Creative Solutions Inc.
7322 Newman Blvd.
Dexter, MI  48130
email: ocreger () creativesolutions com
ph: 734-426-5860 ex. 3787
fax: 734-426-5946
cell: 734-223-6270


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com