Latest trojan doing the rounds?
Latest trojan doing the rounds?
Author
Discussion

kanes

Original Poster:

384 posts

275 months

Monday 23rd August 2004
quotequote all
Looks like somehow my PC has got a trojan, odd I'm trying to figure out what it could be:

NAV and AVG are both up to date, scanned and nothing found
XP SP2 is installed
Ad-aware finds nothing
windows firewall is on, as is my router firewall

But CMD.exe and ftp.exe keep being opened by something, fport and netstat don't really give me any details as to what is opening them.

Any virii or trojans doing the rounds with these symptoms?

rsvmilly

11,288 posts

265 months

Tuesday 24th August 2004
quotequote all
Google for 'Hijack This'. It highlights any differences between your startup files and their standard settings.

Most of the entries will be legitimate but it may highlight something.

kanes

Original Poster:

384 posts

275 months

Tuesday 24th August 2004
quotequote all
Nothing untoward running after checking hijackthis

Very odd thing, I'm 99% sure something is on here:

msmsgs.exe
ftp.exe
cmd.exe

were repeatedly opening (and I was closing via task manager), solved that problem by renaming them but I'm still not happy.

Installed norton and live update was disabled this morning, something is not right. AVG tells me my definitions are up to date (and has for 3 days) and norton is apparently up to date.

spybot S&D finds nothing
adaware finds nothing to do with the trojan
hijack this comes back clean and registry appears clean

Having a hard time finding this little sod or even what trojan it is. Quite a few have popped up in the last few weeks and narrowing it down is pretty hard