Articles

Metasploit Framework Windows Tutorial
Remote Desktop Connection
Windows Processes That May Be Dangerous
How-To use NetCat a Tutorial
Common Linux Commands
Common Ports
Netcat Commands
HTTP Response Codes
War-Google Hack Terms
Wardriving
Avoiding Social Engineering and Phishing Attacks
Intrusion Detection on Linux
Linux Intrusion Detection
Penetration Testing Guide
Penetration Testing Tools
Social Engineering Fundamentals, Part I: Hacker Tactics
Social engineering (computer security)
The Psychology of Social Engineering

The Archives

General GSO
GovernmentSecurity.org News & Suggestions
In The News
Open Topic
General Security Information
Trash Can
Exploit & Vulnerability Mailing List Archives
Trial Member Forum
Product and Program Reviews GSO Tutorials
System Security
Windows Systems
Beginners Section
Linux & Unix Systems
File Downloads
Exploit Research & Discussion Trojan & Virus Errata
Networking Security / Firewall / IDS / VPN / Routers
System Hardening
E-Mail Security
Wifi Security
Trial Member Uploads
Upload discovered Trojans & Mal ware
GSO Programming Section
C , C++ , VC++
Visual Basic.NET
Perl /CGI
Java/Javascript
PHP/XML/ASP/HTML
Assembly + Other
The Cork Board
Network Security Consultant Directory
Network Security Jobs
The Archives
Encryption Information
General Network Security
Internet Anonymity
HTTP Protocol Security
Linux Security
MS IIS Information
Exploit Articles
Programming / Tool Design
GSO Software Projects
Public Downloads
Microsoft Security Questions and Papers

Drosan
Hi guys,

i have a huge problem.

Some times ago i've installed Hacker Defender on "a" computer but now i must stop it.
The problem is, that the rootkit is hiding the net.exe and the complete server does not accept now net commands.
net1.exe does not work too, if I do a command like "net1 start bla" it hangs up. sad.gif
I can't use any gnui tools because i don't have any remote desktop connection to the serv, cause he don't accept (why so ?) VNC or Radmin ect. huh.gif .
So I need something like a cmdline tool which can kill hidden services, or a CMD tool which has the net command included orrr... a Hacker Defender Detector which automaticly removes the rootkit.

Hope for soon help.

Thank's a lot.

Best regards
Drosan
TheSmokingMan
f-secure blacklight console version, its beta but should do the trick

you could also bother to go to the hacker defender website, look under the vip section

there is a list with links to all the tools you could be using to detect/remove hacker defender with
saetji
Look in the file downloads section - theres a few tools to add/delete/start/stop services. Use any of those to do it. If you can't find them, post a reply and someone will post a link
usch
no fxp/hack/shit questions.

usch
NoRRiS
remove hxdef is realy easy
on the hxdef web site u have any tools for and u have other ways
u can stop the service with a simple net stop
u can reboot on safe mode and delete/move/edit ini because hxdef dosen't running on safe mode
An other way is deamware, hxdef isn't hidden in the service manage of deamware
gl wink.gif
tibbar
sounds a bit suspect to me...trashed!
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2005 Invision Power Services, Inc.