Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Oct 13th, 2008, 11:55am
   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Scanner (Moderators: Helena, Gavin_Coe, Magnus)
   IS THIS SOMETHING TO BE CONCERNED ABOUT??		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: IS THIS SOMETHING TO BE CONCERNED ABOUT??  (Read 525 times)
Kat
Newbie
*



I love YaBB 1 Gold!

   


Posts: 5
IS THIS SOMETHING TO BE CONCERNED ABOUT??
« on: Mar 19th, 2002, 5:52am »		 Quote Quote  Modify Modify
Hi everyone,
I could use some help, I'm concerned. I downloaded and ran Trojan Hunter 2.53. The result of the port scan part said in red Port Scan-Port 5190/TCP is open(matches MBomber.100)
Is this something to be concerned about? If so can someone please explain what it means and if I have to do something about it. I'm not too informed about this stuff. Any help you can give me will be greatly appreciated.
Thanks Smiley
IP Logged
vampirefo1
Senior Member
****



I love YaBB 1 Gold!

   
Email

Posts: 328
Re: IS THIS SOMETHING TO BE CONCERNED ABOUT??
« Reply #1 on: Mar 19th, 2002, 11:39am »		 Quote Quote  Modify Modify
Do you use a program called SongSpy? I ask cause I got the same results, as you did, I couldn't figure what was going on, But I soon realized, SongSpy was running, and that is the port it uses.
IP Logged
TrojanHunter Stands for privacy !!!!!!!!!!!




Companies would rather lose you as a customer than fix the problem
Kat
Newbie
*



I love YaBB 1 Gold!

   


Posts: 5
Re: IS THIS SOMETHING TO BE CONCERNED ABOUT??
« Reply #2 on: Mar 19th, 2002, 7:52pm »		 Quote Quote  Modify Modify
Hi,
No I do not use any program called SpySong. I have AOL and I'm really concerned about what this scan result means. I don't want any unexpected surprises(problems) occuring with my computer. I've had problems in the past and do not want anymore. Just want to know if their is anything on my computer that shouldn't be there that I need to get rid of.  
Thanks for the reply. Smiley
IP Logged
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4107
Re: IS THIS SOMETHING TO BE CONCERNED ABOUT??
« Reply #3 on: Mar 19th, 2002, 8:40pm »		 Quote Quote  Modify Modify
AOL Instant Messenger uses that port for file transfers, so if you have AIM and had been transferring a file, that could be why you got the alert.
 
If this happens again, you could find out which program is holding the port open by using a special utility; see question number three in the Remote Access Trojan FAQ: http://www.mischel.dhs.org/trojanfaq.jsp
IP Logged
Kat
Newbie
*



I love YaBB 1 Gold!

   


Posts: 5
Re: IS THIS SOMETHING TO BE CONCERNED ABOUT??
« Reply #4 on: Mar 19th, 2002, 9:10pm »		 Quote Quote  Modify Modify
Hi,
I do not have or use AIM. I never really even talk on IM's when I'm online. I just read and post at message boards.
I will check out that link. I hope I can figure out if this is anything to be concerned about or not. Yesterday when I ran the scan again that result for the port scan part was gone.
Then last night when I ran the scan again the same exact result of the port scan part was back again in red Port Scan-Port 5190/TCP is open(Matches MBomber.100)
I don't know what all this means. I'll keep trying to find out.
Thanks for your help Smiley
IP Logged
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4107
Re: IS THIS SOMETHING TO BE CONCERNED ABOUT??
« Reply #5 on: Mar 19th, 2002, 9:13pm »		 Quote Quote  Modify Modify
MBomber is not a very common trojan, so it's likely that something else is holding the port open when you get that alert. If you try out TCPView Pro as outlined in the FAQ when/if this happens again, you should be able to find out what is holding the port open.
IP Logged
Kat
Newbie
*



I love YaBB 1 Gold!

   


Posts: 5
Re: IS THIS SOMETHING TO BE CONCERNED ABOUT??
« Reply #6 on: Mar 19th, 2002, 9:19pm »		 Quote Quote  Modify Modify
I'm going to download the demo of TCP View Pro now.
I'll see what happens.
Thanks again for your help on this matter.  
Have a great day! Smiley
IP Logged
Kat
Newbie
*



I love YaBB 1 Gold!

   


Posts: 5
Re: IS THIS SOMETHING TO BE CONCERNED ABOUT??
« Reply #7 on: Mar 19th, 2002, 10:40pm »		 Quote Quote  Modify Modify
Hi I'm back again,
Magnus you replied that the MBomber.100 is not a very common trojan. Can you tell me what this trojan does? Can it steal passwords or does it send out mail in your screen name or something?
Thanks again Smiley
« Last Edit: Mar 19th, 2002, 10:42pm by Kat » IP Logged
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4107
Re: IS THIS SOMETHING TO BE CONCERNED ABOUT??
« Reply #8 on: Mar 20th, 2002, 10:20pm »		 Quote Quote  Modify Modify
It's a remote access trojan; one of its functions is to mailbomb victims using the compromised computer as the source of the e-mail messages.
 
If you find out which program holds the port open, you can e-mail the .exe-file to submit@trojanhunter.com for an analysis of what it is.
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register