Trojan from Pprune, is this a problem ?
Thread Starter
Joined: Jul 2003
Posts: 1,323
Likes: 54
From: An Island Province
Trojan from Pprune, is this a problem ?
Norton Anti Virus 2005 detected a ‘Trojan’ when I first logged into Pprune to day. It gave the following message: Inbound, remote address 203.131.139.86, remote port 2946, protocol TCP. Whatever the Trojan was it did not gain access to my computer, but if it had not been detected would it have caused any problems?
Eidolon
Joined: May 2001
Posts: 2,244
Likes: 62
From: Some hole
Alf,
That machine has nothing to do with pprune, its in the Philippines , adsl-131.139.86.info.com.ph, i.e. nothing to do with pprune.
The Internet Service Provider that that machine is connecting through the internet is
INFOCOM Technologies Inc
31/F PLDT Tower II
6799 Ayala Avenue, Makati City
Philippines
Port 2946 is a TCP/UDP prot for fjsvmpor, however I suspect Norton has detected a trojan, not fjsvmpor.
That machine has nothing to do with pprune, its in the Philippines , adsl-131.139.86.info.com.ph, i.e. nothing to do with pprune.
The Internet Service Provider that that machine is connecting through the internet is
INFOCOM Technologies Inc
31/F PLDT Tower II
6799 Ayala Avenue, Makati City
Philippines
Port 2946 is a TCP/UDP prot for fjsvmpor, however I suspect Norton has detected a trojan, not fjsvmpor.
Thread Starter
Joined: Jul 2003
Posts: 1,323
Likes: 54
From: An Island Province
Thanks swh, NAV just blocked more internet worms.
Security rule Trans Scout from:
Remote address 82.53.182.241, port 1949
Remote address 66.68.215.232, port 1636
Remote address 203.131.139.86, port 1238
What is going on? I have not seen these alerts before, am I the unfortunate target or are these symptoms of a much wider attack?
Security rule Trans Scout from:
Remote address 82.53.182.241, port 1949
Remote address 66.68.215.232, port 1636
Remote address 203.131.139.86, port 1238
What is going on? I have not seen these alerts before, am I the unfortunate target or are these symptoms of a much wider attack?
Eidolon
Joined: May 2001
Posts: 2,244
Likes: 62
From: Some hole
alf,
I think you need to run adaware or similar, sounds to me something is on your machine advertising your IP address.
Italy - host241-182.pool8253.interbusiness.it (82.53.182.241)
USA - cpe-66-68-215-232.rgv.res.rr.com (66.68.215.232)
Philippines- adsl-131.139.86.info.com.ph (203.131.139.86)
I think you need to run adaware or similar, sounds to me something is on your machine advertising your IP address.
Italy - host241-182.pool8253.interbusiness.it (82.53.182.241)
USA - cpe-66-68-215-232.rgv.res.rr.com (66.68.215.232)
Philippines- adsl-131.139.86.info.com.ph (203.131.139.86)
