Wilders Security Forums  

Go Back   Wilders Security Forums > Other Security Topics > malware problems & news
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old March 14th, 2002, 01:16 PM
deaditeash's Avatar
deaditeash deaditeash is offline
Infrequent Poster
 
Join Date: Mar 2002
Posts: 14
Default Backdoor Trojan Detection

Ok - I was using ProPort to monitor my port activity and it identified a suspicious active port = port 80 and says I possibly have the Backdoor Trojan. *I ended the connection in ProPort but what program should I use to scan for backdoor? *I have ANTS and it didn't detect anything...how can I know for sure. *I would prefer to use something without having to purchase...

deaditeash
  #2  
Old March 14th, 2002, 04:51 PM
Checkout's Avatar
Checkout Checkout is offline
Security Rhinoceros
 
Join Date: Feb 2002
Posts: 1,227
Default Re: Backdoor Trojan Detection

Quote:
how can I know for sure. *I would prefer to use something without having to purchase...
TDS-3 is inexpensive and you can't get better. *I understand completely how important peace of mind is when it comes to trojans, so don't short-change yourself. *However, try a few freebies from Wilders' anti-trojan page first, by all means.
__________________
My Novel
  #3  
Old March 14th, 2002, 05:26 PM
deaditeash's Avatar
deaditeash deaditeash is offline
Infrequent Poster
 
Join Date: Mar 2002
Posts: 14
Default Re: Backdoor Trojan Detection

Thanks for the info - I am going to install the evaluation version tonight...

Deaditeash
  #4  
Old March 14th, 2002, 05:58 PM
Checkout's Avatar
Checkout Checkout is offline
Security Rhinoceros
 
Join Date: Feb 2002
Posts: 1,227
Default Re: Backdoor Trojan Detection

There's a great deal to it, more than you might guess at first. *It works out-ofthe-box but you'll benefit from investing time in the docs - and you'll be eligible for the upcoming V4 release, which promises to be v. cool indeed. *I hope you have a good experience with it. *I have, and I still have a lot to learn about it.

No, apart from being utterly in love with Jooske, I have no affiliation with DCS.

But I'm open to offers, Wayne!
__________________
My Novel
  #5  
Old March 14th, 2002, 07:45 PM
UNICRON's Avatar
UNICRON UNICRON is offline
Administrator
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: Backdoor Trojan Detection

you are making me jealous after all those PMs!
__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #6  
Old March 14th, 2002, 07:55 PM
Checkout's Avatar
Checkout Checkout is offline
Security Rhinoceros
 
Join Date: Feb 2002
Posts: 1,227
Default Re: Backdoor Trojan Detection

Quote:
you are making me jealous after all those PMs!
Oh, Unicron, you know you're the only DCS Moderator for me!

('Scuse me, I need to find a bown paper bag...)
__________________
My Novel
  #7  
Old March 14th, 2002, 09:53 PM
Jooske's Avatar
Jooske Jooske is offline
Incredibly Massive Poster
 
Join Date: Feb 2002
Location: Netherlands, EU near the sea
Posts: 9,713
Default Re: Backdoor Trojan Detection

Johoo UNICRON, Girlspower and i'm not even blond... but i've other qualities. I'm so happy the TDS family is here1
__________________
Jooske
"o_o"
  #8  
Old March 14th, 2002, 10:15 PM
wizard's Avatar
wizard wizard is offline
Frequent Poster
 
Join Date: Feb 2002
Location: Europe - Germany - Duesseldorf
Posts: 818
Default Re: Backdoor Trojan Detection

Quote:
Ok - I was using ProPort to monitor my port activity and it identified a suspicious active port = port 80 and says I possibly have the Backdoor Trojan. *I ended the connection in ProPort but what program should I use to scan for backdoor? *I have ANTS and it didn't detect anything...how can I know for sure. *I would prefer to use something without having to purchase...

deaditeash

Which Windows version do you use? Some Windowsversion (NT/Win2k) maybe installed the Microsoft Internet Information Server (IIS). Did you checked if this is installed on your computer? Do you run any other web server software? Or maybe spyblocker?

If you use NT/2k/XP you can download Active Ports from http://www.ntutility.com/freeware.html . It is a freeware tools which gives you more information about which program opened a port.

wizard
__________________
wizardRESEARCH - Malware Research & Analysis since 1989
  #9  
Old March 15th, 2002, 04:01 AM
deaditeash's Avatar
deaditeash deaditeash is offline
Infrequent Poster
 
Join Date: Mar 2002
Posts: 14
Default Re: Backdoor Trojan Detection

I have Win ME and actually now I realize that it's probable just detecting SpyBlocker since that is listening on port 80...I also have Spybot, ad-aware, and I just scanned with eval of TDS and no trojans found!

deaditeash
  #10  
Old March 15th, 2002, 08:28 AM
wizard's Avatar
wizard wizard is offline
Frequent Poster
 
Join Date: Feb 2002
Location: Europe - Germany - Duesseldorf
Posts: 818
Default Re: Backdoor Trojan Detection

Yes Spyblocker keeps Port 80 open. So need to worry.

wizard
__________________
wizardRESEARCH - Malware Research & Analysis since 1989
 

Wilders Security Forums > Other Security Topics > malware problems & news « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 09:43 AM.


Powered by vBulletin® Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2009, Wilders Security Forums