Possible Trojan

[t048]

I've been having some problems with my computer and they hit rather suddenly, even though I didn't change anything. I scanned for a virus, but it came out clean. So, I was wondering if there was a way to tell what programs are running on the [windows 98] computer other than ctrl+alt+del list. Maybe ways of auto-starting programs on start of computer (or on the start of other programs) outside of the "Start|Programs|Startup" menu. Thanks.

[daveleau]

You can DL tauscan. It is an intensive trojan scanner. It can be found here and is a DLable demo: http://www.agnitum.com/products/tauscan/

Dave

[TechJumper]

I am not sure about 98, but on 2000 there is a window in the task managers that shows ALL processes running, maybe there is a way to access this window in 98?

Mike

[rock8785]

Well, I used the Tauscan, and it detected a trojan in one of my files. I got rid of the virus, but what else do I need to do?

[etech]

http://newlife-win98.server101.com/wintop_info.htm
Wintop will show you what programs are running and what % of processor time they are taking. It works with W98SE. I have it in the quick launch bar. I found a trojan with it by noticing an unfamiliar program running.

Both mcafee and symantec have virus scans that you can use or download for free. It doesn't hurt to try a differnt virus scan once in awhile. They both require a sign-up.
The mcafee is a on-line scan while the symantec is a download of Nortans AV. It's a large download but gives you a couple of week's trial.


[This message has been edited by etech (edited 11-22-2000).]

[This message has been edited by etech (edited 11-22-2000).]

[daveleau]

Trojans and virii do not always show up in Task mgr. One of our systems at work had i-Worm.mtx (matrix)which is a virus/ backdoor trojan hybrid. mtx.exe is always running and sending network traffic, but does not show in Task Mgr.

After deleting the virus/ trojan, be sure to rescan your system after a reboot because some have a 'dropper' sequence that reinstalls it after reboot. Also do a google search for a fix for whatever virus was found. there may be a need for further reg edits or utility help.
Dave

[rock8785]

Do I need to worry about people getting passwords and stuff like that?

[socalgal]

It would be a good idea to change all your passwords, and make sure your ports are secured/stealthed. Do a scan at ShieldsUP! (http://grc.com/) , it will give you the basic port info and look at securing your box at the Network Bondage section. More info if you need - ask. http://sysopt.earthweb.com/forum/smile.gif

In addition to Tauscan (which I have used in the past), another trojan detector is The Cleaner (http://www.moosoft.com/)

Dave, have you used The Cleaner recently? I'm thinking of doing a comparison test one of these days. http://sysopt.earthweb.com/forum/smile.gif

Edited to fix ShieldsUP! link. http://sysopt.earthweb.com/forum/redface.gif -Socalgal



[This message has been edited by socalgal (edited 11-24-2000).]

[socalgal]

Oh, and read this thread.


http://sysopt.earthweb.com/forum/Forum1/HTML/009210.html

[darrelld]

Great link <A HREF="http://www.grc.net," TARGET=_blank>www.grc.net,</A> I did the scan here and I'm pleased to report that my computer is free of breast cancer.
LOL

[This message has been edited by darrelld (edited 11-22-2000).]

[Ed_S]

http://sysopt.earthweb.com/forum/biggrin.gif http://sysopt.earthweb.com/forum/biggrin.gifLOL...ROFLMAO... http://sysopt.earthweb.com/forum/biggrin.gif http://sysopt.earthweb.com/forum/biggrin.gif

Sorry, Socal, couldn't help it... http://sysopt.earthweb.com/forum/wink.gif

[socalgal]

Doh! Fixed.

LOL!

[This message has been edited by socalgal (edited 11-24-2000).]

[t048]

I just scanned my computer with that Shields Up thing:

All attempts to get any information from your computer have FAILED. (This is very uncommon for a Windows networking-based PC.) Relative to vulnerabilities from Windows networking, this computer appears to be VERY SECURE since it is NOT exposing ANY of its internal NetBIOS networking protocol over the internet.

I guess thats good, but if my computer didn't give 'em any info, how did they know I have a Windows networking-based PC?

It also says that my computer is "operating in FULL STEALTH MODE". Sounds like I'm using a starship or a submarine. http://sysopt.earthweb.com/forum/smile.gif

[Harold7]

t048,
If you want a neat little, FREE utility for showing what's running in Win 98, go here: http://turboware.com/ and get a program called What's happening. It shows all the processes running, plus all the DLL's associated with that process. http://sysopt.earthweb.com/forum/smile.gif