Trojan from Pprune, is this a problem ?

[alf5071h]

Norton Anti Virus 2005 detected a ‘Trojan’ when I first logged into Pprune to day. It gave the following message: Inbound, remote address 203.131.139.86, remote port 2946, protocol TCP. Whatever the Trojan was it did not gain access to my computer, but if it had not been detected would it have caused any problems?

[swh]

Alf,

That machine has nothing to do with pprune, its in the Philippines , adsl-131.139.86.info.com.ph, i.e. nothing to do with pprune.

The Internet Service Provider that that machine is connecting through the internet is

INFOCOM Technologies Inc
31/F PLDT Tower II
6799 Ayala Avenue, Makati City
Philippines

Port 2946 is a TCP/UDP prot for fjsvmpor, however I suspect Norton has detected a trojan, not fjsvmpor.

:ok:

[alf5071h]

Thanks swh, NAV just blocked more internet worms.
Security rule Trans Scout from:
Remote address 82.53.182.241, port 1949
Remote address 66.68.215.232, port 1636
Remote address 203.131.139.86, port 1238

What is going on? I have not seen these alerts before, am I the unfortunate target or are these symptoms of a much wider attack?

[swh]

alf,

I think you need to run adaware or similar, sounds to me something is on your machine advertising your IP address.

Italy - host241-182.pool8253.interbusiness.it (82.53.182.241)
USA - cpe-66-68-215-232.rgv.res.rr.com (66.68.215.232)
Philippines- adsl-131.139.86.info.com.ph (203.131.139.86)

:ok:

[hobie]

alf, are you running any "Messenger" type programs when these NAV detections are being reported?