Computing.Net > Forums > Windows 2000 > Help with Crazy Situation - Trojan?

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Help with Crazy Situation - Trojan?

Reply to Message Icon

Name: Ani
Date: April 16, 2003 at 19:49:45 Pacific
OS: Win2K
CPU/Ram: P4/256
Comment:

I have a cable modem and out of the blue
I saw the UServ FTP server installed on
my machine tray icon.
I can not find it anywhere on my computer.

On investigating the tasks running on my machine I see that there are two tasks mdll.exe and xscan.exe that seem to be funny.
I can not find them anywhere on my machine.

Even when I am not surfing the web there is continous activity on my modem connection!



Sponsored Link
Ads by Google

Response Number 1
Name: Harout
Date: April 16, 2003 at 20:39:28 Pacific
Reply:

I think it will be almost impossible to find the program files, cause they have the ability to change their place constantly, and they are hidden.
WHjat i would advice is to run the netstat -p tcp command to find out which porta are being used by the application that you think are not normal processes, block those ports.


0

Response Number 2
Name: risc99
Date: April 16, 2003 at 21:52:19 Pacific
Reply:

It sounds to me like you may have a trojan. Go to rootkit.org and find a utility that will search your machine for rootkits. From what I understand, there are warez ftp servers that hackers can install if they hack your computer and you will never know that the program is installed. You can't even see the files stored on your hard drive because they are hidden from OS. You need to download a utility to find the hidden warez server. Try looking for some utilities on Google. Good luck. In the meantime, disconnect your system from the internet! Backup your files and reinstall your system! Get a firewall like zonealarm or tiny personal firewall if you can't afford to buy norton or blackice defender.


0

Response Number 3
Name: Joshua
Date: April 20, 2003 at 16:31:42 Pacific
Reply:

I have a DSL connection and the same thing happened to me. I called the company (USERV) and they said there is nothing they can do. They said someone hacked into my PC and set it up so they could access my computer. They said there is no way to unistall the program because whoever did this, did it in such a way that the program would reinstall itself each time I reboot. The only way, they said, would be to reformat my entire drive. I bet there is another way but dangerous because it would probably involve some changes to the registry or something. Anyway, I set up Zonealarm (firewall) and haven't noticed too many problems. We'll see what happens....



0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More


Using exe but with dif ex... Unininstall H/W Device



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows 2000 Forum Home


Sponsored links

Ads by Google


Results for: Help with Crazy Situation - Trojan?

Help with Win95 www.computing.net/answers/windows-2000/help-with-win95/2080.html

Need Help With Server Setup!!!! WILL PA www.computing.net/answers/windows-2000/need-help-with-server-setup-will-pa/21809.html

Need help with my internetsite www.computing.net/answers/windows-2000/need-help-with-my-internetsite/10633.html