A Digital Age Deserves A Digital Leader

Trojan Detectors: use along with Antivirus

Trojan Detectors: use along with Antivirus

Postby Yappinator » Sun Jan 19, 2003 11:51 pm

http://www.misec.net/trojanhunter.jsp

http://www.anti-trojan.net/en/


http://www.agnitum.com/products/tauscan/

All are Anti-Trojan Detector & removers We recommend these in addition to your antivirus. All are Trialware.
Yappinator

Postby SCgone » Mon Jan 20, 2003 12:25 am

My Vet Antivirus picked up a Trojan.Prova today.That's the first one of those I've seen.
PRO PLATINUM
Posts: 6879
Joined: Thu Mar 14, 2002 11:59 pm
Location: South Carolina, USA

Postby Yappinator » Mon Jan 20, 2003 12:45 am

Hey bob Im glad the antivirus Caught it.



This one too is a good one


http://www.anti-trojan.net/en/onlinecheck.aspx


being a online scan you can run it without the trojan being able to disable it like it does to other Antivirus or Trojan detectors.
Yappinator

Postby jojo » Mon Jan 20, 2003 1:55 am

Any Idea what I should do now anyone?? :oops:

100 %
Scan time: 04:15

Port 5000 is open
Application(s): Yahoo Messenger Chat
Trojan(s): Bubbel, Back Door Setup, Blazer 5, Socket 23, Sockets de Troie

Scan complete!
356 ports scanned
1 open ports found
Image
Administrative
User avatar
Posts: 2622
Joined: Mon May 06, 2002 4:03 am
Location: Alberta, Canada

Postby RIP! » Mon Jan 20, 2003 2:07 am

Port 5000 is a common port, however I am not sure why Yahoo would be using it. You can close the port by disabling the UPnP in your OS.

You can go here to get a pgm to chk and see if it's enabled (UPnP) and if so it offers to disable it. UPnP

Note: It will also enable it if you need / want to.

RIP!
RIP!

Postby dlt » Mon Jan 20, 2003 2:11 am

Hi Jojo...

This was in the FAQ;


Open port 5000 on Windows ME/XP?


Why is the port 5000 open?

This port is used by the scheduler for peer-to-peer plug and play functionality for network appliances.

More detailed information about this program do you get directly at Microsoft:

http://support.microsoft.com/support/kb ... 2/4/58.asp

What must I do to close this port?

At Start\Run write msconfig and remove the entry ssdpsrv.exe on autorun. After restarting the port will be closed.

Warning: After this, the network plug and play will not work any longer!

Here you can get a tool to do this automatically:
http://grc.com/unpnp/unpnp.htm
I am extraordinary, I am just your ordinary
average every day sane psycho supergoddess
~Liz Phair, Extraordinary~
PROfessional Member
User avatar
Posts: 705
Joined: Mon Mar 11, 2002 11:56 am
Location: New England, USA

Postby jojo » Mon Jan 20, 2003 2:38 am

Thanks everybody, I obviously don't understand this stuff, thought I had a problem trojan to get rid of. Much obliged.
Image
Administrative
User avatar
Posts: 2622
Joined: Mon May 06, 2002 4:03 am
Location: Alberta, Canada

Postby *Starz* » Wed Feb 05, 2003 4:36 pm

jojo wrote:Any Idea what I should do now anyone?? Trojan(s): Bubbel, Back Door Setup, Blazer 5, Socket 23, Sockets de Troie

Jojo...I believe what this line means on your scan...is that this port is vulnerable to that particular Trojan...I'm posting a list of all ports with commonly known Trojans that use each port...You might consider making a copy to file on your computer... :)
[align=center]Image

~ You Are Never Given A Wish Without Being Given The Power To Make It Come True ~[/align]
PRO Level 16
User avatar
Posts: 1893
Joined: Sat Aug 17, 2002 1:05 am
Location: Great Smoky Mountains

Return to Security & Virus

Who is online

Users browsing this forum: No registered users and 2 guests

cron
cron