Re: virus using port 6667
From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 11/05/04
- Next message: David H. Lipman: "AVERT Low-Profiled Threat Notice: Exploit-IframeBO"
- Previous message: Malke: "Re: For users of Spyware Eliminator by Aluria Software"
- In reply to: rkusenet: "virus using port 6667"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 5 Nov 2004 09:05:45 -0500
rkusenet wrote:
> Hi,
>
> I bought a refurbished Win2K for my home. It had lot of viruses. I
> used Norton utilities to remove all of them except one.
>
> Norton does not report any more viruses. However if I do netstat -a
> I see a connection on port 6667 to an unknown site (some
> mediabiz.rr.com).
>
> How do I go about finding which exe is the trojan.
>
> TIA.
Could be adware....but my advice is, if you have a new (for you) computer
with stuff on it already, reformat/reinstall Windows so you know it's clean
and has only what you want on it. I'm presuming you have your installation
media & licenses for the OS and all applications....
- Next message: David H. Lipman: "AVERT Low-Profiled Threat Notice: Exploit-IframeBO"
- Previous message: Malke: "Re: For users of Spyware Eliminator by Aluria Software"
- In reply to: rkusenet: "virus using port 6667"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|