Keylogger Question

I use the netstat, or netstat -a command to see what outbound connections my computer has. It says port 1025, 1028 are established and 1183 is time wait. I am thinking that these are nothing to worry about or normal. Is there another way to tell if a computer might have a keylogger or trojan horse installed? I use The Cleaner, Spybot, and Norton Anti-Virus, but these programs can miss things. Is there a website that gives any security related info? Any input would be appreciated.

Thank you

 

Hi,

If you're using Windows 98 try going to Start, Run, and type in MSCONFIG. Then click on the Startup tab. Look for any unusual entries that are loading themselves at startup.

Here's a link to a good refernce list:

http://www.doshelp.com/trojanports.htm

This one's a little more comprehensive:

http://www.simovits.com/sve/nyhetsarkiv/1999/nyheter9902.html

Columbo

 

Thank you Columbo for answering my question. I forgot to mention I am using Windows Me. I did check msconfig and everything that appears there I am familiar with. I just had one last question. Is it possible for someone to install a keylogger or trojan horse that would run without appearing in the start-up group of msconfig? Thanks again for your help.

Peter

 

Another thing you could do is install a firewall such as Zonealarm. anytime any program tries to open an outbound port it will pop up a warning and its free.

go here for basic security info

https://grc.com/x/ne.dll?bh0bkyd2

 

Try downloading and using Ad-aware 6 found at: http://www.lavasoftusa.com/support/download/
this should catch any malware and for trojans try TDS-3 at:
http://tds.diamondcs.com.au/
Lastly you can use Outpost Firewall which has virtually no negative remarks on the web regarding it. Found at:
http://www.agnitum.com/products/outpost/

Good luck and let us know how it went!

 

I just wanted to say thank you for everyones help. With all your advice I was able to check my start-up programs and remove spy-ware. Thanks again!

 

If you're ever worried that you may have any trojan horses and what not (that one of those listed apps may miss), just post you're startup list here. It's a small program that creates a small *.txt file with details of exactly what is running when you start the PC. We love it here! I'll be back in a jiffy with a link...

Edit:Click Here

Download Startup list, and just post the file here if you're stuck.