CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Do i have an trojan on my pc?

 
Post new topic   This topic is locked you cannot edit posts or make replies       All -> FavForums -> Trend Micro HijackThis Logs [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
IP: 80.200.*.*

Guest






PostPosted: Wed Jul 23, 2003 10:04 pm    Post subject: Do i have an trojan on my pc?
Reply with quote

I just did an scan of my computer with the help of the following url http://scan.sygate.com/trojanscan.html.

I tells me the following :

1) Trojan 21 OPEN Back Construction, Blade Runner, Doly Trojan, Fore, FTP trojan, Invisible FTP, Larva, WebEx, WinCrash
2) Trojan 8080 OPEN RingZero

I did an virus scan with antivir xp (latest version) and i did an scan with the latest version of the cleaner. But the didn't find anything.

Should i be worried ?

Thnx

Michel

Back to top
IP: 213.16.*.*

Guest






PostPosted: Wed Jul 23, 2003 10:20 pm    Post subject:
Reply with quote

depends on the software you run, do you have a ftp server on port 21 ?
and do you have a proxy software runing on port 8080?

if you do have then you are all right but if you don't then you might have problem

Back to top
IP: 217.136.*.*

Guest






PostPosted: Thu Jul 24, 2003 5:28 am    Post subject:
Reply with quote

Yes i use an proxy on port 8080 (only for browsing).

But i don't run an ftp server.
How can i disable this ?

Thnx

Michel

Back to top
Guest

Guest
IP: 203.59.*.*






PostPosted: Sun Nov 30, 2003 9:11 am    Post subject:
Reply with quote

WELL look at your ports yourself. Look at this for the great port program port EXPLORER ! this is a good article

http://www.winnetmag.com/WindowsSecurity/Article/ArticleID/40313/WindowsSecurity_40313.html

Port 21 is FTP.. FTP server listening ? that could be bad. What is your proxy, and why are you using it. Do you mean you set up a proxy connection for your browser, something like proxy.yourisp.net ? This is a remote connection so shouldn't show up in a local trojan port scan. Please remember local port scans for trojan ports is very unreliable ! Perhaps you even have a local proxy trojan which means you should submit those files to the developers for assistance. Use Port Explorer then save your results and email them to support

Back to top
Acheton

Forums Admin
Premium Member

Joined: Sep 04, 2003
Posts: 8925
Location: Uk
Premium

PostPosted: Sun Nov 30, 2003 1:38 pm    Post subject:
Reply with quote

This conversation would be so much easier to follow if you could all please register. That will make it easier for us all to follow. Thanks,


Ach


_________________
“What success a man builds from his gifting can be destroyed in a moment because of character.”
Back to top
View users profile Send private message Visit posters website
TonyKlein

Site Moderator
Microsoft MVP

Joined: Oct 15, 2002
Posts: 13120
Location: Netherlands
MIRT Moderators MVP Premium Security Experts

PostPosted: Sun Nov 30, 2003 5:18 pm    Post subject:
Reply with quote

Also, go to http://tomcoyote.org/hjt/ , and download 'Hijack This!'.
Unzip, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log somewhere, and please show us its contents.

Most of what it lists will be harmless or even required, so do NOT fix anything yet.
Someone here will be happy to help you analyze the results.

If you DO have a trojan, it'll show.


_________________
Tony image CLSID List
Back to top
View users profile Send private message
CalamityJane

Security Expert
Microsoft MVP

Joined: Oct 05, 2002
Posts: 4004

MVP Premium Security Experts

PostPosted: Sun Nov 30, 2003 6:24 pm    Post subject:
Reply with quote

Shocked Seeing as that Guest today is replying to a post from last July, perhaps we might want to lock this thread and if the July posting Guest still has a problem, he could start a new topic Smile

I think I will do that (thread is locked) Smile

Back to top
View users profile Send private message Visit posters website
Display posts from previous:   
Post new topic   This topic is locked you cannot edit posts or make replies       All -> FavForums -> Trend Micro HijackThis Logs All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer