confused... again

hopefully for the last time...

after installing the sygate firewall, the webroot
spysweeper and the avg anti-virus, it seems i still have
an open port (5000)that may (and hence may not) be
infected with a trojan (bubbel?). the spysweeper doesn't
pick it up, and an online scan usually shows it is still
there (although sometimes it doesn't show up on the scan
either). is this anything to worry about or have i
covered all my bases and this just some residual problem
that simply i can't get rid of?

thanks!
j.

"time flies like an arrow. fruit flies like bananas!"

N
Wed Jan 28 16:21:46 CST 2004

In article <5b4d01c3e585$0b9dd510$a401280a@phx.gbl>,
anonymous@discussions.microsoft.com says...
> hopefully for the last time...
>
> after installing the sygate firewall, the webroot
> spysweeper and the avg anti-virus, it seems i still have
> an open port (5000)that may (and hence may not) be
> infected with a trojan (bubbel?). the spysweeper doesn't
> pick it up, and an online scan usually shows it is still
> there (although sometimes it doesn't show up on the scan
> either). is this anything to worry about or have i
> covered all my bases and this just some residual problem
> that simply i can't get rid of?

Port 5000 is also used by UPnP. If you don't have any devices which need it
(generally only Internet Gateway/Firewall/Router devices), or if you don't
need the services that UPnP provides for those devices, try turning it off.
I don't use Windows XP, so I can't help you there. In Windows Me (and, I
think, Windows 98 SE) you would go to Control Panel > Add/Remove Programs >
Windows Setup, and select "Communications" from the list, then click the
"Details..." button. UPnP is near the end of the list.

If disabling UPnP closes port 5000, then you probably don't have any kind of
malware on that port.

--
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint

groucho
Wed Jan 28 19:02:12 CST 2004

thanks! i'll try that (even though it's complicated... my
windows is in korean and i have yet to master the
language.... but i should be able to find it...)

cheers!
>-----Original Message-----
>In article <5b4d01c3e585$0b9dd510$a401280a@phx.gbl>,
>anonymous@discussions.microsoft.com says...
>> hopefully for the last time...
>>
>> after installing the sygate firewall, the webroot
>> spysweeper and the avg anti-virus, it seems i still
have
>> an open port (5000)that may (and hence may not) be
>> infected with a trojan (bubbel?). the spysweeper
doesn't
>> pick it up, and an online scan usually shows it is
still
>> there (although sometimes it doesn't show up on the
scan
>> either). is this anything to worry about or have i
>> covered all my bases and this just some residual
problem
>> that simply i can't get rid of?
>
>Port 5000 is also used by UPnP. If you don't have any
devices which need it
>(generally only Internet Gateway/Firewall/Router
devices), or if you don't
>need the services that UPnP provides for those devices,
try turning it off.
>I don't use Windows XP, so I can't help you there. In
Windows Me (and, I
>think, Windows 98 SE) you would go to Control Panel >
Add/Remove Programs >
>Windows Setup, and select "Communications" from the
list, then click the
>"Details..." button. UPnP is near the end of the list.
>
>If disabling UPnP closes port 5000, then you probably
don't have any kind of
>malware on that port.
>
>--
>Norman
>~Win dain a lotica, En vai tu ri, Si lo ta
>~Fin dein a loluca, En dragu a sei lain
>~Vi fa-ru les shutai am, En riga-lint
>.
>