|
-
June 29th, 2004, 09:17 PM
#12
Most of them do look out of place to me with the following exception
wuauclt.exe
http://www.liutilities.com/products/...brary/wuauclt/
looks like the Windows update client, however also seems like it is dropped by at least one virus
http://securityresponse.symantec.com...kdoor.clt.html
If we are looking for trojan that implies ports being open to recieve commands usually so you might light to try Fport and see which processes are attached to your open ports http://www.foundstone.com/resources/proddesc/fport.htm
I know you can get the same sort of thing by doing netstat -an but I prefer Fport and its free 
Definately go back and run another scan and write down the Trojan names etc this time.
Good luck
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|