Author Topic: Trojans  (Read 3870 times)

0 Members and 1 Guest are viewing this topic.

hawkeye59

  • Guest
Trojans
« on: September 13, 2005, 07:06:04 AM »
I just downloaded the latest version of AVAST and ran the scan on my laptop.  It came up with 15 Trojans.  I recommended action was to send to virus chest which I did. The names of the Trojans were: W32:Ruledor (TRJ) or W32:Trojan-Gen. (other).  I haven't been on my laptop for a year and a half and the dates the changes were made by the Trojans were from 2003.  I researched those particular names of the Trojans but found nothing.  I know sometimes they are called by other names.  I have an outdated Norton anti-virus program but keep it disabled. I also have Zone Alarm for a firewall (just downloaded new version of ZA) My laptop seems to be running just fine but it was before I ran Avast scan and it found those Trojans.  Any information on these Trojans and what if any damage they might have done would be greatly appreciated.  Also, because it was recommended to send them to the virus chest instead of repair or delete them mean they are not to serious of a problem?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31072
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Trojans
« Reply #1 on: September 13, 2005, 07:15:52 AM »
Have a look at this http://82.75.52.232/smf/index.php?topic=2.msg5#msg5

Things in the chest are protected by Avast.
This means Windows/dos can not do anything with them.

Nicolas

  • Guest
Re: Trojans
« Reply #2 on: September 13, 2005, 09:23:19 PM »
Eddy's link doesn't work (maybe site hit by a virus)

But you only have to Google:

W32 Ruledor

Many references. Not a nice beast.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31072
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Trojans
« Reply #3 on: September 14, 2005, 04:30:44 AM »
My link does work, but you shouldn't use a proxy.
HTTP port is open, but not port 1026, which you where trying to use.

Nicolas

  • Guest
Re: Trojans
« Reply #4 on: September 14, 2005, 01:13:31 PM »
Eddy, your link does work now (it's Eddy's site).

Yesterday, the little pictures in your signature were not visible. Now they are back again.


Nicolas

  • Guest
Re: Trojans
« Reply #5 on: September 14, 2005, 01:48:09 PM »
Eddy, I found two logs of port 1026 attempts yesterday, both incoming and blocked by firewall:

1. 13:00   from  61.152.102.38  L Port 12673
2. 12:49   from 222.136.188.49 L Port 43547

Is there coincidence ?