Help for alg.exe and local port 1028...

Discussion in 'Port Explorer' started by jepa, Jan 1, 2006.

Thread Status:
Not open for further replies.
  1. jepa

    jepa Registered Member

    Joined:
    Dec 9, 2004
    Posts:
    6
    Location:
    Italy
    Hello all, i have a strange problem with alg.exe.
    After install port explorer i ask what is local port 1028 (assigned to lo alg.exe) and PE reply me that is used by RAT : HACkeRz.
    At this point i did a search on google and found that is a backdoor.
    I do regularly AV scan with Fsecure2006, i have installled giant antispyware, i have sygate personal firewall, how is this possible?
    Also sometimes i receive a portscan on ports 1028,1033,1033, 4257.

    Please help me.

    Thanks in advance :-*
     
  2. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    It is normal for alge.exe to establish a listening connection on your system and nothing to worry about. The information PE is giving you on port 1028 is that this port has also been associated to RAT: HACkrRz, not that you have this particular malware.

    It is normal to see portscans like this in your firewall logs. One resource on current scanning trends is Internet Storm Center.

    Regards,

    CrazyM
     
  3. jepa

    jepa Registered Member

    Joined:
    Dec 9, 2004
    Posts:
    6
    Location:
    Italy
    Thanks m8, very helpful.

    All the best
     
Thread Status:
Not open for further replies.