Trojan Found

Discussion in 'Trojan Defence Suite' started by dallen, Nov 11, 2003.

Thread Status:
Not open for further replies.
  1. dallen

    dallen Registered Member

    Joined:
    May 11, 2003
    Posts:
    824
    Location:
    United States
    TrojanDownloader.W32.CPR was found on my computer. I right-clicked and told TDS to delete the file and on a subsequent scan nothing was found. I want to make sure that it is really gone.

    Additionally, I want to set up TDS to allow me to send files for analysis, but when I put my hotmail e-mail address in and click test email TDS says test email failed.
     
  2. Andreas1

    Andreas1 Security Expert

    Joined:
    Jan 29, 2003
    Posts:
    367
    Location:
    Mainz (Ger)
    Hi dallen,
    The server field, where you have 127.0.0.1 is where the name or IP address of a server has to be entered that accepts email for remote delivery. So when you send mail away, this is the server you hand it over to. Probably it's something like smtp.isp.com, since smtp is the protocol used to do the hand-over.
    The only thing which could create problems is, if neither your internet connection provider, nor your hotmail web-based mail provider actually provide SMTP service. Can you find that out?

    Andreas

    P.S. 127.0.0.1 is a standardized number and would always be "localhost", i.e. your local, present computer. Set up like this, TDS connects to your computer and says "Hey, SMTP server. I have mail here for dallen, there it is." But since on your own computer you have no such SMTP server running, the whole process will fail.
     
  3. Storm

    Storm Registered Member

    Joined:
    Nov 8, 2003
    Posts:
    46
    Hi there!

    AFAIK Hotmail only works via a web browser.. they don't allow any POP3/SMTP stuff, so in order to send the suspected trojan you would have to register an e-mail account with a provider that allows you to use POP3 to receive and SMTP to send e-mail!

    Greetz
    Storm
     
  4. Andreas1

    Andreas1 Security Expert

    Joined:
    Jan 29, 2003
    Posts:
    367
    Location:
    Mainz (Ger)
    ...maybe your internet connection provider has an smtp server you can use. for what you want to set up, you don't actually need the POP3 stuff, just SMTP...

    (Incoming mail will be sent by DCS simply to your mail address and it's not important if you use a web-interface to read it or POP to download it. I hope i have expressed it well.)
     
  5. dallen

    dallen Registered Member

    Joined:
    May 11, 2003
    Posts:
    824
    Location:
    United States
    Thanks guys. I do have an email account at Purdue that I use that might work, but how do I find the correct IP address for the server that accepts the mail?

    Oh, what's with the stars and newbie and karma stuff by my name?
     
  6. dallen

    dallen Registered Member

    Joined:
    May 11, 2003
    Posts:
    824
    Location:
    United States
    I found out the name of the server and tested it and everything works fine now. Thanks for you help, but I still want to know what the Newbie, stars and karma things are.
     
  7. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    17,878
    Location:
    New England
    The titles and stars are simply signs of the number of posts people have made. From 0-50 posts, there is one star and the title of Newbie. From 51-100 there are two stars and the title Junior Member. Then it is Full Member from 101-250 posts with three stars, Senior Member from 251-1000 posts showing four stars and finally from 1001 posts upward, there are 5 gold stars and a title of Major Senior Member.

    Also, I put together a forum FAQ to explain karma: FAQ: What is Karma?
     
  8. dallen

    dallen Registered Member

    Joined:
    May 11, 2003
    Posts:
    824
    Location:
    United States
    Good system. It encourages people to be active but at the same time it rewards meaningful activity. However, I think that some forum members would like to have the power to punish people for bad posting . I just want people to know that I would have applauded a few of the very helpful replies, but I'm only a newbie. So a big thank you will have to do. Some day I hope to make junior member.
     
  9. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Hi Dallen,
    the negative karma (the booo! button) has been removed on many requests due to abuse or maybe people read wrong confusing smite with smile, so only the applaus (good karma) is there. So feel free to press the karma cookies for the people you think helped you most or when you see a very good posting somewhere.


    But good your infection --the cause of this thread-- seems to have gone.
     
Thread Status:
Not open for further replies.