Trojan ports?

Author
Discussion

a311

Original Poster:

5,806 posts

177 months

Wednesday 23rd April 2014
quotequote all
More specifically how easy is it to close/fiddle with these?

I'm not overly computer savvy, recently I was given secure access to my works server-pick a password then you get an encryption key that changes every 60 seconds. However on logging in I get a message saying a Trojan port was found opened on my PC.

It's a new laptop and I've also tried it on my home built PC. A google shows that this isn't necessarily from me downloading something dodgy but can be that this is picked up on as some manufactures do this to receive updates etc?

I can get one of our IT guys to look at this but they're based at another site some 3 odd hours away so I'm not going to make a special journey until I'm next down there which could be a month or two.

I'm on Windows 8, is this doable for me with instructions? Can anyone provide some or a link?

Cheers


a311

Original Poster:

5,806 posts

177 months

Thursday 24th April 2014
quotequote all
tribbles said:
It is possible to get the process information for applications which have sockets open on the system.
Thanks for the comprehensive reply. I'm trying to follow this though now.

Tried the GRC thing and got this back:



a311

Original Poster:

5,806 posts

177 months

Thursday 24th April 2014
quotequote all
grumbledoak said:
Well, the good news is you are quite happily behind a working router and/or firewall, so the Internet cannot see you by default. The bad news is you will have to persevere with the other (more techy) ways of listing open ports to find out which it is...
That's good news, just need to figure out how to fix it. My dream of being bale to work form home a few days a week will have to wait until it's sorted smile

a311

Original Poster:

5,806 posts

177 months

Thursday 24th April 2014
quotequote all
These seem to be all my ports which are currently 'listening.'




a311

Original Poster:

5,806 posts

177 months

Thursday 24th April 2014
quotequote all
No idea what this scarlet thing is! It's a new laptop that I purposefully didn't put anything on as it's going to be used to work from home-plenty of other hardware sitting around for that!

Software doesn't give any idea what it's specifically not liking I've had a bash closing some ports in the firewall.

a311

Original Poster:

5,806 posts

177 months

Thursday 24th April 2014
quotequote all
grumbledoak said:
I would put 'something' on it:
http://www.malwarebytes.org/mwb-download/
Cool will try it out.

Tried closing port 135 inbound and outbound and my software is still spitting the dummy.

a311

Original Poster:

5,806 posts

177 months

Thursday 24th April 2014
quotequote all
That found a few nasties on the system.

This is the message I'm getting form the software:

A Trojan Horse is a piece of software which is listening for connections from the internet and is used by hackers to pass information from your computer to the internet. An example would be a key logger which records all your passwords and sends them to a site on the internet.

The ports checked include Telnet, SSH, web server, FTP and SQL server

Please refer to the User Guide for more information.

User guide says:No Trojan Horse ports open for listening, this includes Telnet, SSH, web server, SQL server. A Trojan Horse is a piece of software which is listening for connections from the internet and is used by hackers to pass information from your computer to the internet. An example would be a key logger which records all your passwords and sends them to a site on the internet. See note (1) below.
TLS 1.0 Activated.
The URL in the Trusted sites list.


Admin privileges on your PC to install the cache cleaner and Host checker.
IE configured to allow Active-X controls to be loaded.
ICA Client loaded.
We currently do not check for anti-malware software installed on your PC, but this may be activated in the future. The list of accepted anti-malware software is; Adaware, AOL Spyware, BPS Spyware remover, CA E-trust, McAfee Antispyware, Microsoft Anti- spyware, Pest control, PREVX, SPC Yahoo, Spy Suite, Spyware Be gone, Spyware Doctor, Spyware Blaster, TrendMicro Anti-Spyware, Webroute spysweeper, Yahoo anti spyware.
Note (1): To check you do not have ports open, type in the command “NETSTAT –NA” at a DOS command prompt. If you are having problems, then type in the following command:
NETSTAT –NA >c:\portlist.txt

Well it's got me stumped. Is there a way of closing ALL ports other than I'm assuming one that is required to send/receive info?