Vulnerability Development mailing list archives

Re: Shutting down windows NT remotely (without winnt toolkit)?


From: Marshal <marshal () marshal-soft com>
Date: Fri, 09 Nov 2001 14:08:04 +0100

Lincoln Yeoh wrote:

At 12:06 AM 05-11-2000 -0800, Robert Freeman wrote:

A reboot is helpful unless the NT box is not password protected or has an
agent to automatically enter the password upon startup. Until an admin shows
up the box is basically useless.


AFAIK the services still start after a reboot. So the trojaned box still
scans the whole internet.


I don't for NT but a 'echo your box has a trojan' 'pause' in autoexec.bat would do the trick on a windows 95/98 machine..probably something similair is possible on NT?


--
grt, marshal

[ url  : http://www.startplaza.nu | security news & links    ]
[ url  : http://www.heknet.com    | security news & exploits ]


Current thread: