PDA

View Full Version : Tiny Telnet Server ? trojan


bsinwa
April 2nd, 2002, 04:30 PM
Greeting all!

Hope I didn't miss the search feature...
I recently installed Sygate Pro 5 on my XP Pro system and while running the trojan detector it informed me that port 23 was open and Tiny Telnet Server was possibly active. I have seen no suspicious flow in the logs and have NAV (up to date) running which has also not reported anything unusual. This is a new laptop which came w/ NAV from day 1. I am running a D-link wireless router / WAP on a DSL connection and Gibson research Leaktest also pointed out the open port 23 but said it was likely being used by the router. Have searched the registry and the HD for windll.exe which I understand is a marker for TTS, but found nothing.. so, do I or don't I have this trojan operating and if so, how can I find / remove it?
\
Thanks in advance!

BS

Paul Wilders
April 2nd, 2002, 05:21 PM
Hello BS,

I suggest installing a (trial) version from TDS3 (available from our downloads page:

www.wilders.org/downloads.htm

grab and install the latest radius update from the DCS website:

www.diamondcs.com.au *(downloads section)

and perform a full scan, all files included.

Please post your results.

regards.

paul

bsinwa
April 3rd, 2002, 02:43 AM
Hi Paul,

Thanks for the tip re: TDS... I ran ver 3.2.1 and founf no trojans so I guess The telnet being ID'ed is the network connection...

Thanks again!

Paul Wilders
April 3rd, 2002, 05:01 AM
{QUOTE-> Hi Paul,

Thanks for the tip re: TDS... I ran ver 3.2.1 and founf no trojans so I guess The telnet being ID'ed is the network connection...

Thanks again! <-QUOTE}

My pleasure, BS *:) Glad to see all's clean!

regards.

paul