Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: Constant Trojan Attacks By Soket de Trois

  1. #1
    Junior Member
    Join Date
    May 2004
    Posts
    14

    Constant Trojan Attacks By Soket de Trois

    I have Norton firewall installed on my machine and for the past three days I have been under constant attack every five minutes from someone using the soket de trois trojan.

    The IP address changes but seems to emanate from a city in South Carolina, I have tried to find ISP by IP but was unable to match up.

    This is getting old now and I was wondering if someone could help me to stop this happening.

    Thanks for any help!

  2. #2
    Banned
    Join Date
    Jul 2001
    Posts
    1,100
    Greetings:

    The only reason that it's "getting old now", is because you keep looking at your logs. Set it up so you're not being actively notified on attempts, and just ignore your firewall, knowing that it's doing what it's supposed to do.

    Any computer connected to the internet these days will be hammered non-stop by some worm or another. Don't waste your time trying to "deal" with them.

  3. #3
    Junior Member
    Join Date
    May 2004
    Posts
    14
    Thankyou

  4. #4
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    It's not sockets de troie! The rise in probes on port 5000 are contributed to the appearance of 2 new worms. These are Bobax and Kibuv. See my thread here.
    Oliver's Law:
    Experience is something you don't get until just after you need it.

  5. #5
    Junior Member
    Join Date
    May 2004
    Posts
    14
    I'm running win 98, my firewall is detecting and blocking these attacks, I'm assuming that they are not getting through........

  6. #6
    Senior Member therenegade's Avatar
    Join Date
    Apr 2003
    Posts
    400
    hmm..yeah port 5000 has reportedly been taking a hit on a lot of computers,I assumed it was either someone checking for the trojan or some kind of worm..thnx SirDice

  7. #7
    AFLAAACKKK!!
    Join Date
    Apr 2004
    Posts
    1,066
    How exactly are you going about trying to find the ISP?

    Port 5000 eh? I'll have to check that port on my firewall, any idea's on what this port's purpose is?
    I am the uber duck!!1
    Proxy Tools

  8. #8
    I'd rather be fishing DjM's Avatar
    Join Date
    Aug 2001
    Location
    The Great White North
    Posts
    1,867
    The port used for "Universal Plug and Play" in Windows XP.


    Cheers:
    DjM

  9. #9
    Senior Member
    Join Date
    Oct 2002
    Posts
    4,055
    Not being hit on any of my machine's, but then again none of mine are XP. What firewall are you using? And you said your runnig Win98 (which I have on one of my boxes) and your getting probed. If your saying your firewall is blocking access to the port and is stopping the attack, you have nothing to worry about. You will always be probed for various port's all the time, some more than other's though.
    Space For Rent.. =]

  10. #10
    Junior Member
    Join Date
    May 2004
    Posts
    14
    To the Duck:

    This site can help find someones ISP through IP, just type in the ip in the box and click submit, it should also come up with an email address for the isp.

    http://network-tools.com/default.asp?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •