si this a trojan

Discussion in 'Software' started by bern, May 17, 2003.

  1. bern

    bern Sergeant

    Possible trojans. NetSpy 0.698
    Possible trojans. Sockets de Troie, Blazer 5

    if these are how to rid them and what software you recommend

    also is there a site that list trojans
     
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

  3. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

  4. bern

    bern Sergeant

    it was anti-trojan5.5 it found these 2 and said that they were possible trojans
     
  5. daffie

    daffie Private E-2

    On Win ME and possible win XP that have Universal Plug n Play services running it will usually open port 5000, and this could possibly trigger that socket de troie warning as that trojan is known to be using port 5000 and 5001. Only way to close it, is by disable those Universal Plug and Play services.

    You could download the tool to disable it from here..http://grc.com/unpnp/unpnp.htm

    Or from your Add/Remove Programs, goto Window Setup tab, and under Communication, uncheck the Universal Plug and Play. I did this and my port 5000 was never an issue again.
     
  6. bern

    bern Sergeant

    i ran the check and nothing found but anti trojan still finds the 2 possible trojans
     
  7. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    The big word here is Possible?


    What does you AV scan say?
     
  8. bern

    bern Sergeant

    my av says all clear but when anti trojan checksthe ports it finds these 2 possibles
     
  9. daffie

    daffie Private E-2

    Do you still have Universal Plug and Play enable? Because it uses port 5000 and Anti-Trojan will detect this as possible Socket de Troie as this trojan run on the same port 5000.
     
  10. bern

    bern Sergeant

    no i have now disable it seems to be gone now
     
  11. Balbanebeoulve

    Balbanebeoulve Bal. Balba. Babalabawhosemawhutsie

    Just a piece of advice, even killing the trojan itself may still leave you open to attack. I was messing around with a trojan on myself and couldn't disable it so I kept trying to figure a way to stop the trojan from accessing my computer. So I deleted everything but the control panel for it. I then figured out I can only disable it by deleting the server that came with it control panel. So after you are infected with a trojan, from what I know unless you shutdown the server, you're screwed. That's what I've picked up from experience so it's just a theory.
     
  12. bern

    bern Sergeant

    how do i close a port because this netspy 1 of its functions is to keep the port open i tried to close it with anttrojan but says it cannt
     
  13. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    If you have ZoneAlarm you can block incomming and outgoing ports....by going to Firewall then on both Internet Zone Security & Trusted Zone Security click Custom and at the bottom you will see

    Block Incomming TCP Port
    Block Outgoing TCP Port

    once you click 1 of them you then need to enter the Port number for the Trojan you want to block, then click the other and enter same data.....

    eg. Netspy generally uses ports 7300,7301,7306,7307,7308 or you can block the whole range eg. 7000-8000

    But be careful as there maybe a port that you need
     
  14. bern

    bern Sergeant

    iam using nortons and i cannt seem to find soething as blocking a tcp port
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds