[Yappinator]

http://www.misec.net/trojanhunter.jsp

http://www.anti-trojan.net/en/


http://www.agnitum.com/products/tauscan/

All are Anti-Trojan Detector & removers We recommend these in addition to your antivirus. All are Trialware.

[SCgone]

My Vet Antivirus picked up a Trojan.Prova today.That's the first one of those I've seen.

[Yappinator]

Hey bob Im glad the antivirus Caught it.



This one too is a good one


http://www.anti-trojan.net/en/onlinecheck.aspx


being a online scan you can run it without the trojan being able to disable it like it does to other Antivirus or Trojan detectors.

[jojo]

Any Idea what I should do now anyone??

100 %
Scan time: 04:15

Port 5000 is open
Application(s): Yahoo Messenger Chat
Trojan(s): Bubbel, Back Door Setup, Blazer 5, Socket 23, Sockets de Troie

Scan complete!
356 ports scanned
1 open ports found

[RIP!]

Port 5000 is a common port, however I am not sure why Yahoo would be using it. You can close the port by disabling the UPnP in your OS.

You can go here to get a pgm to chk and see if it's enabled (UPnP) and if so it offers to disable it. UPnP

Note: It will also enable it if you need / want to.

RIP!

[dlt]

Hi Jojo...

This was in the FAQ;


Open port 5000 on Windows ME/XP?


Why is the port 5000 open?

This port is used by the scheduler for peer-to-peer plug and play functionality for network appliances.

More detailed information about this program do you get directly at Microsoft:

http://support.microsoft.com/support/kb ... 2/4/58.asp

What must I do to close this port?

At Start\Run write msconfig and remove the entry ssdpsrv.exe on autorun. After restarting the port will be closed.

Warning: After this, the network plug and play will not work any longer!

Here you can get a tool to do this automatically:
http://grc.com/unpnp/unpnp.htm

[jojo]

Thanks everybody, I obviously don't understand this stuff, thought I had a problem trojan to get rid of. Much obliged.

[*Starz*]

Any Idea what I should do now anyone?? Trojan(s): Bubbel, Back Door Setup, Blazer 5, Socket 23, Sockets de Troie

Jojo...I believe what this line means on your scan...is that this port is vulnerable to that particular Trojan...I'm posting a list of all ports with commonly known Trojans that use each port...You might consider making a copy to file on your computer...