08 Mar 2008, 7:25 am
08 Mar 2008, 7:33 am
viska
Veteran
Joined: 26 Jan 2008
Age: 44
Gender: Male
Posts: 720
Location: Everytime you close your eyes: Lies, lies.
08 Mar 2008, 10:41 am
08 Mar 2008, 12:22 pm
08 Mar 2008, 12:36 pm
good news everyone..got it off whith my spyware terminator
08 Mar 2008, 1:35 pm
batista90 wrote:
good news everyone..got it off whith my spyware terminator
That doesn't sound familiar. Are you sure you have not acquired a third virus?
08 Mar 2008, 3:59 pm
lau wrote:
batista90 wrote:
good news everyone..got it off whith my spyware terminator
That doesn't sound familiar. Are you sure you have not acquired a third virus?
08 Mar 2008, 5:11 pm
08 Mar 2008, 5:40 pm
08 Mar 2008, 7:01 pm
and that dont take much since default in all in and out move in computers is port 1268..otherwice known as port 4 
08 Mar 2008, 7:20 pm
viska
Veteran
Joined: 26 Jan 2008
Age: 44
Gender: Male
Posts: 720
Location: Everytime you close your eyes: Lies, lies.
08 Mar 2008, 7:31 pm
batista90 wrote:
and that dont take much since default in all in and out move in computers is port 1268..otherwice known as port 4
huh?
09 Mar 2008, 6:01 am
anyone else obessed whith computers and games?
..ok there has several ports in computer depending is it laptop or table pc...and every port has its own number-serial and number which gives computer a information what to use 
09 Mar 2008, 6:02 am
in computer..u see that net cable? well it goes to port number 4
09 Mar 2008, 7:59 am
viska wrote:
batista90 wrote:
and that dont take much since default in all in and out move in computers is port 1268..otherwice known as port 4
huh?
Checking, with ShieldsUp! from http://www.grc.com I can see that port 1268 is listed as "propel-msgsys" with no further information, which I suspect implies that it is either an exploit that has got into you machine via this port, or maybe just normal handling (all ports from 1024 upwards, to the maximum 65535, are typically allocated dynamically).
On further inverstigation, "propel-msgsys" has something to do with the http://propel.com/ software, I believe. I'd guess it is no longer in use by them, though.
I have no idea what port 4 might have to do with it. It has not got any predefined meaning, so far as GRC says. Indeed, it is very definitely shown as "unassigned" in the official lists for ports 0-1023. I would be very suspicious of it being in use at all. Any usage would almost certainly be improper.
If you take the GRC test (all service ports), you should see everything as "stealth". If not, you are probably infected and open to more infections.
I fail the test, because I am currently running a web server. Of all the posts, just my port 80 (http) is open - and it regularly gets attacked, which my firewall and Apache handle.
Interestingly, it's been a couple of days since the last attack got as far as Apache:
Code:
189.81.46.167 - - [07/Mar/2008:13:01:08 +0000]
"B\x92\xed\x97P\x97r`\x0fr\x84?\x
a4\x804\xc8\xd8\xf3'" 501 358 "-" "-"
"B\x92\xed\x97P\x97r`\x0fr\x84?\x
a4\x804\xc8\xd8\xf3'" 501 358 "-" "-"
That's an example of someone (in São Paulo, Brazil) trying to exploit a current open security hole in Microsoft servers (probably) or an ancient, filled one in Apache.
09 Mar 2008, 11:21 am
