Well I went a away for a week and to my suprise when I got back my hd 
was full. I accidentaly left my ftp server on with anonymous acces. 
Well somebody in france started a ftp server from my comp.
after removing the french movies and the folders I turned of 
anonymous and nobody can get into my comp.

I traced the ip of the person who started the server and it came from 
somebody in france. I checked to see what ports they had open, and 
ftp, http, and 1033???? I checked on the internet and port 1033 is 
used by a program (Trojan) called Netspy. I thought I was ok because 
my port 1033 was not open. but my computer is constantly recieving 
packets. I didn't think that this was normal so I decided to try some 
other things

After using netstat It shows that I have a loop back from port 1033 
on my comp to 803 and vice versa. I put up a really secure firewall 
for the time being but I can't find out how to remove this trojan, if 
it is one.

Anybody have any idea


Crymsan
-- 

_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com


-- 
The iMac List is sponsored by <http://lowendmac.com/> and...

 Small Dog Electronics    http://www.smalldog.com  | Refurbished Drives |
 - Epson Stylus Color 580 Printers - new at $69    |  & CDRWs on Sale!  |

PowerON Computer Services <http://www.poweron.com> REPLACEMENT PARTS in STOCK
Drives, CD-ROMs, RAM, Mac OS SW, Power Supply <mailto:[EMAIL PROTECTED]>

      Support Low End Mac <http://lowendmac.com/lists/support.html>

iMac List info:         <http://lowendmac.com/imac/list.shtml>
Send list messages to:  <mailto:[EMAIL PROTECTED]>
To unsubscribe, email:  <mailto:[EMAIL PROTECTED]>
For digest mode, email: <mailto:[EMAIL PROTECTED]>
Subscription questions: <mailto:[EMAIL PROTECTED]>
Archive: <http://www.mail-archive.com/imac-list%40mail.maclaunch.com/>

Using a Mac? Free email & more at Applelinks! http://www.applelinks.com

Reply via email to