Keylogger Question

[Petlydecker]

I use the netstat, or netstat -a command to see what outbound connections my computer has. It says port 1025, 1028 are established and 1183 is time wait. I am thinking that these are nothing to worry about or normal. Is there another way to tell if a computer might have a keylogger or trojan horse installed? I use The Cleaner, Spybot, and Norton Anti-Virus, but these programs can miss things. Is there a website that gives any security related info? Any input would be appreciated.

Thank you

 

[columbo]

Hi,

If you're using Windows 98 try going to Start, Run, and type in MSCONFIG. Then click on the Startup tab. Look for any unusual entries that are loading themselves at startup.

Here's a link to a good refernce list:

http://www.doshelp.com/trojanports.htm

This one's a little more comprehensive:

http://www.simovits.com/sve/nyhetsarkiv/1999/nyheter9902.html

Columbo

 

[Petlydecker]

Thank you Columbo for answering my question. I forgot to mention I am using Windows Me. I did check msconfig and everything that appears there I am familiar with. I just had one last question. Is it possible for someone to install a keylogger or trojan horse that would run without appearing in the start-up group of msconfig? Thanks again for your help.

Peter

 

[Jtoast]

Another thing you could do is install a firewall such as Zonealarm. anytime any program tries to open an outbound port it will pop up a warning and its free.

go here for basic security info

https://grc.com/x/ne.dll?bh0bkyd2

 

[QSection]

Try downloading and using Ad-aware 6 found at: http://www.lavasoftusa.com/support/download/
this should catch any malware and for trojans try TDS-3 at:
http://tds.diamondcs.com.au/
Lastly you can use Outpost Firewall which has virtually no negative remarks on the web regarding it. Found at:
http://www.agnitum.com/products/outpost/

Good luck and let us know how it went!

 

[Petlydecker]

I just wanted to say thank you for everyones help. With all your advice I was able to check my start-up programs and remove spy-ware. Thanks again!

 

[Corrosive]

If you're ever worried that you may have any trojan horses and what not (that one of those listed apps may miss), just post you're startup list here. It's a small program that creates a small *.txt file with details of exactly what is running when you start the PC. We love it here! I'll be back in a jiffy with a link...

Edit:Click Here

Download Startup list, and just post the file here if you're stuck.