Author: Dann Corbit
Date: 14:41:25 05/09/02
Go up one level in this thread
On May 09, 2002 at 07:57:47, Ernst Walet wrote: >Tried again today and message still comes up. This is the log entry: > >Unknown 5/9/2002 13:51:29 IP Filter Rule "Default Block Sokets de Trois v1. >Trojan horse" blocked (195.96.107.241,5001). Details: >Inbound TCP connection >Local address,service is (195.96.107.241,5001) >Remote address,service is (cap.connx.com(209.20.248.158),ftp-data(20)) >Process name is "N/A" > > >Unknown 5/9/2002 13:51:29 IP Filter Intrusion attempt detected from address >cap.connx.com(209.20.248.158) by rule "Default Block Sokets de Trois v1. Trojan >horse". >Blocked further access for 30 minutes. > > > >Apparently your computer is trying to connect to mine at port 5001, and this >port is also commonly used by this Trojan horse. > >Thanks for checking your ftp. I am using the WARD-FTP Daemon. It just connects back on the next available port. It usually seems to use ports in the 1000 range or the 5000 range. It is strange that you always get 5000. At any rate, McAfee's latest scan package finds nothing. I think it is just the FTP service I am using is not very sophisticated.
This page took 0 seconds to execute
Last modified: Thu, 15 Apr 21 08:11:13 -0700
Current Computer Chess Club Forums at Talkchess. This site by Sean Mintz.