• New Horizons on Maelstrom
    Maelstrom New Horizons


    Visit our website www.piratehorizons.com to quickly find download links for the newest versions of our New Horizons mods Beyond New Horizons and Maelstrom New Horizons!

Trojan be carefull

C

CSHM

Captain Sir Henry Morgan
GUI Developer
Storm Modder
I am just warning people, i just tried to update something on the ftp using ftp commander and when i tried to go on to the pirates ahoy ftp my computer told me that a trojan was trying to get in. I am just telling people this so you know, and you should be carefull.
I checked my symantec client firewall, and it said that the attacker was:

<!--quoteo--><div class='quotetop'>QUOTE</div><div class='quotemain'><!--quotec--><b>202.190.197.199</b><!--QuoteEnd--></div><!--QuoteEEnd-->
 
Uh? That's weird. Worrisome too... <img src="style_emoticons/<#EMO_DIR#>/piratesing.gif" style="vertical-align:middle" emoid=":shock" border="0" alt="piratesing.gif" />
 
I tried to upload a sail today and i got the warning again.
It was from the same address.
 
<!--quoteo(post=157778:date=Aug 12 2006, 02:58 PM:name=Captain Sir Henry Morgan)--><div class='quotetop'>QUOTE(Captain Sir Henry Morgan @ Aug 12 2006, 02:58 PM) [snapback]157778[/snapback]</div><div class='quotemain'><!--quotec-->
I tried to upload a sail today and i got the warning again.
It was from the same address.
<!--QuoteEnd--></div><!--QuoteEEnd-->


It seems to me that this address could be the IP of the ftp server. Maybe the server try to access a port your firewall has been blocked and that's why it give out a trojan warning.

I use Core FTP for connecting and I get this startup message:

<i> 27 Entering Passive Mode (202,190,197,199,231,182).
LIST
Connect socket #568 to <!--coloro:#FF0000--><span style="color:#FF0000"><!--/coloro-->202.190.197.199<!--colorc--></span><!--/colorc-->, port ######...
150 Opening ASCII mode data connection for file list
226 Transfer complete. </i>

The IP is the same as in your trojan warning and as I understand the startup procedure this could be IP of the ftp server. Maybe you have to open up the port by hand. But I don't know much about your firewall options. Maybe your firewall don't know the ftp server IP and marked it as an attacker.
My virusscanner didn't found anything that could be a trojan horse. I have make two searches with it after I read your warning in this forum.
 
It didn't used to say this, so i think there must be a virus hidden somewhere. I am using the same program for putting stuff on the ftp and for scanning for virus' since the last time i went on there.
 
You must log in or register to reply here.
Back
Top