hi donkee,
you may have a trojan.
if you can, hit the start button, go to run and type in the word command, then click ok, a dos prompt screen will open, at the prompt type in netstat, then a space, then type in
-an.
an active connections box will open where you will see Proto, Local Address, Foreign Address, and State.
Proto is for your protocols TCP and UDP,
Local Address is where you will see your local connections including the ports and address that are being used.
Foreign Address is where you will find where your computer is connected to, so if there is anything there take note of it including the ip address, and port. This maybe the Trojan and it may tell you where the trojan is coming from, and the open port to which it is connected to.
State will tell you if it is listening, closed, or if you are trojaned, Established mode.
If you do have a trojan, by looking at the Foreign Address Section, go to www.thepublicworks.com security section, link to Tantalo Ports, do a search on the open port(s) and find out the name of the trojan. once found go to simovits consulting, and find out the info you need on that specific trojan, always noting the port and file name.
While at thepublicworks.com, if you wish download, free RegProt (free Registry monitor), Sysinternals for a free process monitor(process explorer, and procmon, a free port monitor) also hit the Free Ants link to download the free A Squared anti-trojan, get the latest definitions, and scan your machine.
hope this helps, all the best,
murve
|
0 
