Discussion Locked

Ports

0 helpful
9 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I ran a network scan on my system and it detected an open trojan port, how can I close this port. It's reopened everytime I reboot.

9 replies

by tech010

These utilities are great, thanks; but they are unable to close that port. It's port 5000 socket23, I put up a firewall and the port was still open so I'm assuming that there's a file on my hard drive I need to remove, any ideas?

by bt3

Hmmm, loaded question. "An open trojan port" may be nothing more than a port that is not blocked. You can tell you firewall to block it if 1)you know what port and 2)you don't need it open for other reasons. i.e. Port 6667, 6668, etc is used for CHAT server client software (mIRC, etc) and 113 is used as the Identification (ident) port by the same software. I mention these because this is typically what trojans use. You also may be infected. If so, look for a file called RUNDIL.EXE and delete it, being careful not to delete RUNDLL.EXE. they look the same from Explorer due to font.

by mckaytech

I've had some success in tracking down this sort of thing with ZoneAlarm - quite often it will give you enough information about the program that is opening the port to track it down and delete it.

If that doesn't work, you might try scanning your registry for '5000' and see what you come up with.

In doing a search on google.com for 'Port 5000 Socket 23', I did come across a posting that described how to make a chess-game called Xboard work across a firewall by using port 5000 to get to the telnet port (23). That might be something to look for.

paul

by dmiles

the port 23 that is open refers to tiny telnet server,and the 5000-Bubbel,Back Door Setup,Sockets de Troie
If the Trojan restart everytime Windows is loaded that means it put something in the registry or win.ini or other system files
Also it may be a file in the Windows\System directory.
Go to MooSoft Development and find The Cleaner-searches out Trojan Horses and cleans them from your system

This discussion is closed to new replies.