Someone please help

Status
This thread has been Locked and is not open to further replies. The original thread starter may use the Report button to request it be reopened but anyone else with a similar issue should start a New Thread. Watch our Welcome Guide to learn how to use this site.

motocross95

Thread Starter
Joined
Oct 30, 2001
Messages
110
ok, so I go into DOS and type netstat and under one of the connections I see "JACKASS:nbsession". I am wondering if nbsession means somehow I got netbus on my computer?
 

eddie5659

Moderator
Malware Specialist
Joined
Mar 19, 2001
Messages
37,484
Hiya

Go here and run a virus scan

http://housecall.antivirus.com/housecall/start_corp.asp

It may be a trojan on your system. Do you have a firewall? If not, get ZoneAlarm www.zonelabs.com and let us know if anyone is trying to gain or get out access.

Also, when you're there, can you print out the entire line for us. In DOS Command, I mean. When you're in there, click the dotted box. a flashing cursor will appear. Drag that over the bits you wish to copy, then use the copy button. paste here.

by the way, are you just typing netstat or are you typing

netstat -a

Regards

eddie
 
Joined
Dec 9, 2000
Messages
45,855
It could be that or some other Trojan. I assume you have no reason to have port 139 open and a NetBios session established, which is what that is indicating.

ZoneAlarm is a good recommendation, install the free version.

If you have no reason to be networking or sharing resources you should close port 139. You can do that with a utility available on the Reticulated Toys Site. I'm not sure if HouseCall will spot all the trojans that could cause this, but if you run the StartupLog application and copy/paste the Startuplog.txt (not stubbpaths) file here, we can tell if Netbus or some other trojan is installed:

http://home.earthlink.net/~rmbox/Reticulated/Toys.html
 

motocross95

Thread Starter
Joined
Oct 30, 2001
Messages
110
Thank you, that relieves me, because I am on a college network and I am sharing some things on it. I wasn't aware that nbsession meant NetBios. The thing is though, I just checked and nothing is actually shared. How do I close an open port? and how could I close a connection with an IP through DOS? Will ZoneAlarm prohibit me in any way from using the internet in the way that I am now, and stop people from hacking effectively?
 
Joined
Dec 9, 2000
Messages
45,855
You will have to leave that port open if you are networked. Since I don't do networking myself, I can't really give you detailed information on how ZoneAlarm is best used. Perhaps some others here can.

Some people do have trouble configuring ZA with networking and some don't. You should be able to easily configure it to give access where required -- but you may need some experienced help if there is a problem.

For specific netorking/internet related questions, post a topic in one of those forums, you will have a better chance of getting experienced, knowlegeable answers.
 
Status
This thread has been Locked and is not open to further replies. The original thread starter may use the Report button to request it be reopened but anyone else with a similar issue should start a New Thread. Watch our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Members online

Top