Possible Trojan 
Author Message
 Possible Trojan

Hi i suspect that a Trojan maybe is using my UPS software to have access to
my PC, i recently have +10 Attacks in 4 Days by different Trojans Horses an
IPs, where blocked by the Firewall, Above is the most commons active
connections. Any help will be very welcome. Thanks.

Anyone know what is Remote *ircu-1, ircu-2, ircu-3, ircu-4* ??

  Proto Executable Remote Local Sent Recv Time
  TCP ICONCLNT.EXE lpsta: ircu-2 lpstat01: 1027 1807820 1929083 33:48:57
  TCP ICONCLNT.EXE lpsta: ircu-3 lpstat01: 1028 0 0 33:48:57
  TCP MPREXE.EXE  lpsta: nbsession 0 0 33:50:44
  TCP MSIMN.EXE msnews.microsoft.com: nntp lpstat01: 2806 161 82813 5:24
  TCP POPROXY.EXE  localhost: pop3 0 0 33:49:03
  TCP RPCSS.EXE  localhost: 1025 0 0 33:50:13
  TCP RPCSS.EXE  lpsta: dcom 0 0 33:50:10
  TCP UPS.EXE  localhost: ircu-2 0 0 33:50:10
  TCP UPS.EXE  localhost: ircu-3 0 0 33:50:10
  TCP UPS.EXE lpsta: 1027 lpsta: ircu-2 1929083 1807820 33:48:57
  TCP UPS.EXE lpsta: 1028 lpsta: ircu-3 0 0 33:48:57
  UDP IEXPLORE.EXE  localhost: 2768 186 0 12:34
  UDP MPREXE.EXE  lpsta: nbdatagram 0 0 33:50:44
  UDP MPREXE.EXE  lpsta: nbname 1838 0 33:50:44
  UDP UPS.EXE  lpsta: ircu-1 0 0 33:50:10



Fri, 12 Dec 2003 08:18:14 GMT  
 
 [ 1 post ] 

 Relevant Pages 

1. Win98 possible trojan?

2. Trojan

3. Trojan Help

4. TASM Trojan Macro Library

5. TROJAN HORSE WARNING!

6. Beware Trojan horse in tin newsreader

7. Pickle trojan security issue, fixed?

8. Antigen found Win32/PSW.Hooker 2.4.Trojan (CA(InoculateIT)) virus

9. TROJAN ALERT! (JS/Loop)

10. TROJAN ALERT! (JS/Loop)

11. Trojan Dialer Virus

 

 
Powered by phpBB® Forum Software