Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

suspecious of being hackered or trajoned

I used a netmon to check the port status of our win98 client. found the ports 1104, 1025, 1092, 1093, 1095, 1098, 1099 were listening to *.*. I knew these ports could be related to trajons, appreciate someone provide comments on "is it a just negative positive, or real trajon?" -

The port information related to trajon:

port 1024 Latinus, Lithium, NetSpy, Ptakks

port 1025 AcidkoR, BDDT, DataSpy Network X, Fraggle Rock , KiLo, MuSka52,

port 1092 Hvl RAT

port 1095 Blood Fest Evolution, Hvl RAT, Remote Administration Tool - RAT

port 1097 Blood Fest Evolution, Hvl RAT, Remote Administration Tool - RAT

port 1098 Blood Fest Evolution, Hvl RAT, Remote Administration Tool - RAT

port 1099 Blood Fest Evolution, Hvl RAT, Remote Administration Tool - RAT

The active port status of my Win98 was:

Remote address : *:*

Local address : *:1092

Protocol : UDP

Remote address : *:*

Local address : *:1093

Protocol : UDP

Remote address : *:*

Local address : *:1099

Protocol : UDP

Remote address : *:*

Local address : *:1100

Protocol : UDP

Remote address : *:*

Local address : 10.194.1.108:netbios-ns

Protocol : UDP

Remote address : *:*

Local address : 10.194.1.108:netbios-dgm

Protocol : UDP

Remote address : *:*

Local address : localhost:1104

Protocol : UDP

Remote address : *:*

Local address : *:loc-svr

Protocol : TCP

Status : Listening

Remote address : *:*

Local address : *:1091

Protocol : TCP

Status : Listening

Remote address : *:*

Local address : *:1092

Protocol : TCP

Status : Listening

Remote address : *:*

Local address : *:1093

Protocol : TCP

Status : Listening

Remote address : *:*

Local address : *:1095

Protocol : TCP

Status : Listening

Remote address : *:*

Local address : *:1098

Protocol : TCP

Status : Listening

Remote address : *:*

Local address : *:1099

Protocol : TCP

Status : Listening

Remote address : *:*

Local address : *:1100

Protocol : TCP

Status : Listening

Remote address : *:*

Local address : *:1102

Protocol : TCP

Status : Listening

Remote address : *:*

Local address : 10.194.1.108:netbios-ns

Protocol : TCP

Status : Listening

Remote address : *:*

Local address : 10.194.1.108:netbios-dgm

Protocol : TCP

Status : Listening

Remote address : *:*

Local address : 10.194.1.108:netbios-ssn

Protocol : TCP

Status : Listening

Remote address : *:*

Local address : 127.0.0.1:1025

Protocol : TCP

Status : Listening

Remote address : *:*

Local address : 127.0.0.1:1104

Protocol : TCP

Status : Listening

1 REPLY
New Member

Re: suspecious of being hackered or trajoned

Check out the following URL for details on Trojan Horses.

http://www.simovits.com/sve/nyhetsarkiv/1999/nyheter9902.html

177
Views
0
Helpful
1
Replies
CreatePlease login to create content