General discussion

Locked

Ports

By Tech010 ·
I ran a network scan on my system and it detected an open trojan port, how can I close this port. It's reopened everytime I reboot.

This conversation is currently closed to new comments.

9 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Ports

by dmiles In reply to Ports

The Trojan is a two part program that that gives a hcker access to your computer,The Trojan Horse are normally hidden files that end in .exe
For Trojan detection and removal,download the utility The Cleaner from MooSoft Development or go to Hackfixand find backwork2,there is also McAfee Virus Tools
A hacker has control of your computer
Reference:
www.thefuseboard.fsnet.co.uk/videsfind
http://secured-top25.hypermart.net

Collapse -

Ports

by Tech010 In reply to Ports

These utilities are great, thanks; but they are unable to close that port. It's port 5000 socket23, I put up a firewall and the port was still open so I'm assuming that there's a file on my hard drive I need to remove, any ideas?

Collapse -

Ports

by bt3 In reply to Ports

Hmmm, loaded question. "An open trojan port" may be nothing more than a port that is not blocked. You can tell you firewall to block it if 1)you know what port and 2)you don't need it open for other reasons. i.e. Port 6667, 6668, etc is used for CHAT server client software (mIRC, etc) and 113 is used as the Identification (ident) port by the same software. I mention these because this is typically what trojans use. You also may be infected. If so, look for a file called RUNDIL.EXE and delete it, being careful not to delete RUNDLL.EXE. they look the same from Explorer due to font.

Collapse -

Ports

by Tech010 In reply to Ports

Poster rated this answer

Collapse -

Ports

by McKayTech In reply to Ports

I've had some success in tracking down this sort of thing with ZoneAlarm - quite often it will give you enough information about the program that is opening the port to track it down and delete it.

If that doesn't work, you might try scanning your registry for '5000' and see what you come up with.

In doing a search on google.com for 'Port 5000 Socket 23', I did come across a posting that described how to make a chess-game called Xboard work across a firewall by using port 5000 to get to the telnet port (23). That might be something to look for.

paul

Collapse -

Ports

by Tech010 In reply to Ports

Poster rated this answer

Collapse -

Ports

by dmiles In reply to Ports

the port 23 that is open refers to tiny telnet server,and the 5000-Bubbel,Back Door Setup,Sockets de Troie
If the Trojan restart everytime Windows is loaded that means it put something in the registry or win.ini or other system files
Also it may be a file in the Windows\System directory.
Go to MooSoft Development and find The Cleaner-searches out Trojan Horses and cleans them from your system

Collapse -

Ports

by Tech010 In reply to Ports

Poster rated this answer

Collapse -

Ports

by Tech010 In reply to Ports

This question was closed by the author

Back to Networks Forum
9 total posts (Page 1 of 1)  

Related Discussions

Related Forums