Re: Fw: services.exe file

From: Harlan Carvey (keydet89_at_yahoo.com)
Date: 12/11/03

  • Next message: junk_at_zounds.net: "DS trojan opens ports fport does not detect?"
    Date: Thu, 11 Dec 2003 13:20:36 -0800 (PST)
    To: incidents@securityfocus.com
    
    

    Dano,
     
    > http://www.thejamzone.com/services/services.zip

    Thanks.
     
    > Within in XP, I can NOT uncheck the hidden attribute
    > that is set although I
    > can unhide in DOS. After unhiding it, I ran f-prot
    > and it did say that it
    > was a "security risk" or backdoor program.

    Did F-prot say _which_ backdoor program it was?

    > It came to my attention after
    > running a netstat and constantly seeing connections
    > being made to the two outside hosts.

    Hhhmm...do you remember which ports? Also, you didn't
    need to install a personal firewall...simply use fport
    or openports (my personal fav) to find out which
    process was using the ports, then get rid of the
    process and executable image.

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------


  • Next message: junk_at_zounds.net: "DS trojan opens ports fport does not detect?"

    Relevant Pages

    • Re: Fw: services.exe file
      ... > or openports (my personal fav) to find out which ... > process was using the ports, ... The port that is was sending data out on was 80. ... did install the firewall because now i'm really blown away at other ...
      (Incidents)
    • Re: f-prot on 5.2.1
      ... > Has anyone got f-prot via ports to install on 5.2.1? ... I downloaded the free version from f-prot directly. ... To unsubscribe, ...
      (freebsd-questions)