Member Panel


Sponsors and Ads

Live Tag Cloud

Anti-Virus - Trojan posted in the Security & Safety forums; Hi. How to detect an undetecteble trojan when tries to connect to its owner?...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 02-10-2007
kit's Avatar
kit kit is offline
Bronze Member
 
Join Date: Jun 2006
Posts: 14
kit - See this Members User comments on their Profile page
Default Trojan

Hi.
How to detect an undetecteble trojan when tries to connect to its owner?


  #2  
Old 02-10-2007
upgrader's Avatar
Site Manager
My PC
 
Join Date: Jul 2006
Location: C:\ UK
Posts: 6,239
PC Experience: Some Experience
upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page
Send a message via MSN to upgrader Send a message via Skype™ to upgrader
Default

Hi kit,

We have a dedicated team of security analysts here - if you would like to follow the PCHF prework link in my dig and post back here your logs as attachments an analyst will take a look at them for you.

Chris


__________________
PCHF Rules--PCHF Prework--PCHF Downloads
  #3  
Old 02-11-2007
kit's Avatar
kit kit is offline
Bronze Member
 
Join Date: Jun 2006
Posts: 14
kit - See this Members User comments on their Profile page
Default

Hi,
I'm using TCPview from Sysinternals and a netstat from cmd. How and if a trojan will be visible? I'm just asking.
Thanks!



Last edited by kit; 02-11-2007 at 12:40 AM.
  #4  
Old 02-11-2007
chiaz's Avatar
Senior Security Analyst
 
Join Date: Jun 2006
Location: Singapore
Posts: 2,511
PC Experience: PC Guru
chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page
Default

Both allow you to see what ports are listening or connected on your computer and what executable/application owns that process; if I'm not wrong.

What firewall are you running? A commercial firewall would most likely have a Program Control feature, which detects and allows you to stop, or allow programs that want to connect to the internet/server.


  #5  
Old 02-11-2007
kit's Avatar
kit kit is offline
Bronze Member
 
Join Date: Jun 2006
Posts: 14
kit - See this Members User comments on their Profile page
Default

Hi,
i'm using only xp firewall. If a trojan is present will this be shown like for example A0000998.exe, wich will conect to it's owner or looks different?


  #6  
Old 02-11-2007
upgrader's Avatar
Site Manager
My PC
 
Join Date: Jul 2006
Location: C:\ UK
Posts: 6,239
PC Experience: Some Experience
upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page upgrader - See this Members User comments on their Profile page
Send a message via MSN to upgrader Send a message via Skype™ to upgrader
Default

XP's built in firewall isn't particularly good, i recommend using Zonealarm Free Edition.

ZoneAlarm - Free Software Downloads and Software Reviews - Download.com


__________________
PCHF Rules--PCHF Prework--PCHF Downloads

Reply
New! Norton Internet Security 2008 – Download Now Click Here

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On


All times are GMT +1. The time now is 08:52 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top