Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Aug 28th, 2008, 1:16pm
   Mischel Internet Security Forum
   Internet Security
   General (Moderators: Helena, Gavin_Coe, Magnus)
   Port 1111/TCP is open (matches Tport.100)?		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: Port 1111/TCP is open (matches Tport.100)?  (Read 720 times)
Ghuraba
Newbie
*



I love YaBB 1 Gold!

   


Posts: 1
Port 1111/TCP is open (matches Tport.100)?
« on: Nov 12th, 2002, 10:52pm »		 Quote Quote  Modify Modify
Hi this is my first post here.
 
Any idea what this line means?  I ran TH today after updating the latest trojan list.
IP Logged
Dana
 Guest

Email
Re: Port 1111/TCP is open (matches Tport.100)?
« Reply #1 on: Nov 13th, 2002, 4:15am »		 Quote Quote  Modify Modify   Remove Remove
Hello.
 
I am also a newbie.  I got this:
 
Port 3150/TCP is open (matches DeepThroat.100)
Port 3150/TCP is open (matches DeepThroat.200)
Port 3150/TCP is open (matches DeepThroat.310)
Port 3150/TCP is open (matches MiniBacklash.110)
 
There are no reports of any trojans found but why these ports "open"?  Also I have zone alarm.  Isnt a firewall supposed to help.  
 
Please forgive my ignorance but I dont understand if there is a trojan or not in my system.
IP Logged
Ian
Stole All the Forum Stars
********



Good things come to those who wait ...

   


Posts: 2907
Re: Port 1111/TCP is open (matches Tport.100)?
« Reply #2 on: Nov 14th, 2002, 9:46pm »		 Quote Quote  Modify Modify
Hi,
 
Check out this thread:-
http://www.misec.net/cgi-bin/yabb/YaBB.cgi?board=TrojanHunter&action =display&num=1036266235
It deals with a very similar thing regarding ports being reported as open. Also, check out the TrojanHunter FAQ on the 'Support' link at the top of the page.
 
Main links to follow - http://lists.gpick.com/pages/Port_Lists.htm for several lists that could help ID the application using the port.
http://www.winternals.com for TCPView Pro, to spot actual open Internet ports, plus what's using them.
http://www.pcswired.com/graciej/ for Graciella's security tips page
 
Dana, a firewall only helps, but isn't a cure-all. If, for example, you open an email attachment on your machine, it is possible to infect a PC (even if it's stuffed full of security software). The firewall may stop the 'nasty' from spreading, but if it uses email to get out, your firewall probably couldn't tell the difference between this and Outlook Express, since they would use the same port. A firewall like ZoneAlarm checks the application using the port (not all firewalls do this), but some viruses will actually use Outlook Express to post themselves on, so even there the firewall is fooled.
IP Logged
... but crap arrives pretty much straight away.
Jamming
Stole All the Forum Stars
********




Remember when a Trojan was just for protection.

   


Gender: male
 Posts: 2038
Re: Port 1111/TCP is open (matches Tport.100)?
« Reply #3 on: Nov 17th, 2002, 8:08am »		 Quote Quote  Modify Modify
I agree with pretty much everything Ian, said but here is a simple explaination.
 
These ports that you detected open match a rule for the ports which these Trojans use.  It doesn't mean that these ports are actually now being used by a Trojan.  Easiest way to know that is to shutdown your browser which sometimes opens these ports temporarily and run Quick Scan again in 2 minutes.  If they are still open then you might have a problem.
 
As to a Firewall, depending upon which firewall you have operating on your machine will help protect you from a Trojan.  If you are going to purchase a firewall make sure that it has Outbound Protection, most (90%+) do.  If you really want to be safe you need a firewall which either does its own "stateful protection" like, Zone Alarm or that allows you to do your own inspection, several of the rules based hardware out there.  Yes, your firewall is probably helping you either way.
IP Logged
Team Z Member

Servare cives, major est virtus patriae patri.
- Lucius Annaeus Seneca
I was born an American; I live an American; I shall die an American!
- Daniel Webster
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register