Computers: The Technical Thread [!OT]

Yes, it was history since i saw the first I.E. pron pop up, USBN.exe, clean and fast, it was executed remotely in my computer.

The trouble is not that, now, it seems there is a trojan in the computer because "trojan guarder" says there is one, and ALWAYS, if i hadn't shutdown the RPCSS.exe ports and program, there would be a server listening in port 135 each time i turn on the computer. even when there is no connection to Internet. Because of that, i'm annoyed, besides, i have detected some spyware, such as gator, but those were in DIVX codecs... not to worry, as i never worried before, but is annoying.

The ports which are now worrying me are the Netbios ports, also, now, when i connect to internet, those ports are opened, and start listening. No connection noticed, though, but is annoying.

is there any way to close the netbios permanently? perhaps, deleting some DLL's which aren't useful for a standalone computer?

IRT Melfice: "trojan guarder" says there is one

Have you tried antiviruses like AVG and other detectors, like Ad-aware, Spybot, or a? (A Squared)? This might be a false positive.


if i hadn't shutdown the RPCSS.exe ports and program, there would be a server listening in port 135

This is normal, it's the RPC port mapper, it should be doing that. You may use a firewall (don't know if Windows XP's will work, but it should) to block it from the outside. I wouldn't shut that service down, lots of things will need it.


i have detected some spyware, such as gator, but those were in DIVX codecs

Ga(y)tor is bundled with DivX, I suggest you dump DivX and use ffdshow for playback (replacing DivX, XviD, MPEG2, MPEG1, MPEG audio, and OGG Vorbis, all in one with superb filters like various sharpening algorithms and the best video quality ever), and XviD for encoding.


Netbios ports

Windows does that, don't worry. NetBIOS is used for SMB (Windows shared resources, like shared folders and printers) against legacy Windows (9x/ME and NT 3/4). Modern Windows use SMB over TCP.

If all of the computers in your LAN are running Windows 2K, XP, or 2003 (or you don't have a LAN, and are running Windows 2K, XP, or 2003), you may happily disable NetBIOS. Here's how. (If you don't have a LAN you should also shut down the Workstation and Server services and set them to Manual.) You may also shut down the Computer Browser service and set it to Manual.

Well, well, well, all thing seems back to normal, I've installed, and conveniently updated Norton Antivirus, and i have run a test on the comp. It only detected the spyware i detected also with PANDA online, but no trace of other viruses or trojans. Probably, the ones that trojan guarder detected corresponded to a false pattern. Not obstant, i won't stop watching my computer for more... odd behaviors.

I've downloaded Kerio Personal Firewall.. I'd like to configure it properly, but i'm not sure how to do it... please, any of you know?

Every firewall is different, but conceptually, all you need to do is to allow all outgoing connections and block all incoming connections except for the ports and protocols you use for P2P, Skype, etc. For example, eMule needs a TCP port and an UDP port. Use two different port numbers for them, above 20000 and under 65000 (those are safest), while keeping everything else blocked.

Most software firewalls will allow you to select which applications can receive incoming connections, and they may present you with a choice the first time they attempt to, so it might be even easier.

Don't know... i've found something interesting though, i'll keep investigating it.

Edit: Well, now it seems i've found a rule to block ports. Besides, having Norton Antivirus active and prepared, simply makes me feel more confortable.

<font color="#345E81" size="1">[ May 29, 2005 06:13 PM: Message edited by: Melfice ]</font>

gaaah, STUPID MSN AND STUPID INTERNET EXPLORER!

Could someone please help me? I have a computer related issue. Any help would be appreciated.

Basically, since I installed Mozilla, I have found no need for IE and thus have uninstalled it. Since then all has been well, and no issues were encountered.
However, it seems that MSN Messenger still uses IE as it's "home" internet window (I think), thus whenever I would select a link from MSN to go to my hotmail account, an IE window would open (despite it being uninstalled, and not accessible on my desktop).
Anyway, for whatever reason, it would seem that the "Work Offline" status on the file menu for the IE window has been set, however due to IE being inaccessible from my desktop since it was uninstalled, I cannot open IE and thus cannot rectify this annoying problem.
As a consequence, I cannot set IE to "Work Online", and therefore cannot connect onto MSN (it keeps saying "Your Internet Explorer is set to "Work Offline". Please change this setting on your IE browser menu").

Can anyone help me resolve this problem?

And also, does anyone know how I can set Mozilla as my default browser for MSN? Or do I have to reinstall the IE shit just for MSN?

Thanks [img]smile.gif[/img]

I have a similar problem, although ive learned to just open explorer. It doesnt tell me its offline though.

hmm, so should I reinstall IE then?

Im searching around for a plugin which'll make Mozilla compatible with MSN messenger. No luck yet.