Is this a trojan tryng to send a message out ?

05-26-06, 07:51 PM

Dave Neve

Hi

I suspect that I have got a trojan in my computer after having downloaded a
freebie.

My anti virus warned me and I got rid of it with SmitfraudFix.

But when I start up, the suspected program still tries to send a message out
thru IE.

The details (according to Kerio firewall) are

Distant Localhost 127.0.0.1 Port 1038
Distant details TCP local port 1039 and 1040

What surprises me are the local host adresses but I don't really know much
about TCP protocol.

Is this really an outgoing call or just some sort of legitimate activity at
startup for this software.

The software has no real reason to access Internet as it is just a type of
keyboard shortcut software (but I wonder if it is actually logging keyboard
activity?)

Thanks in advance

Dave Neve

PS I did try the IE group but surprisingly had little help

05-26-06, 10:44 PM

Jonah

On Fri, 26 May 2006 20:51:54 +0200, "Dave Neve"
<NoAddressForSpammers> wrote:

[..]
>keyboard shortcut software (but I wonder if it is actually logging keyboard
>activity?)
>
>Thanks in advance
>
>Dave Neve
>
>PS I did try the IE group but surprisingly had little help
>Whatever it is you did not get rid of it, probably is a trojan but
even if it is innocent you still need to ensure your PC is not
compromised.

Try this link - courtesy of David J Lipman who is one of the best
security posters around.

http://claymania.com/removal-trojan-adware.html

and go and have a look at

microsoft.public.security.homeusers

There are many posts in there with great anti malware advice Tell them
exactly what the malware is reported as and you will get a more
specific answer.

IE group? nobody with any sense uses IE any more for general
browsing 8-) get Firefox and add the "noscript" enhancement.

Jonah

Similar Threads
Trojan message Hi Guys Windows Defender keeps telling me I have a Trojan. The bloody thing keeps popping ads up whenever I try using a link on the net. So far, that's all it does, which...
Tryng to run sfc /scannow I'm trying to run system file checker and when I do I get a pop up window that states "files that are required for windows to run properly must coppied to the Dll Cache. ...
Erroro when tryng to configure I am getting this error Error Configuring Enterprise single sign on and the error in the event viewer is secret server access denied when i try installing BTS 2004 on my...
trojan message despite using AVG, Anti-Trojan and BitDefender, I continue to recieve the following message on start-up and shut-down: Virus >Trojan Horse Downloader.DYFICA.C >is found in...
Tryng Again Using Win 98 Upgrade. When I go to open OE the page opens but immediately freezes up the machine. Have scanned with Norton AV several times with latest definitions. ...