ICQ in XP

Hi

I would be grateful if anyone would be able to advise which application or what uses this in XP

I think it has something to do with network & uses a port which a Trojan can get in ( port 1025 )

My Firewall alerts me about this - thankfully it stops anything.

I have used a Trojan Hunter & know I don't have any. I would like to be a lot happier by being able to find out if I can disable something which I do not need.

I do not have the alert on my LT which has an OEM XP (HE sp1)

My DT has the full XP (HE sp1a ) therefore it must be something which is on my DT which I can do without.

Any advice would be appreciated. I am totally unsure what this is

Thanks in Advance.

 

Thank you

Hi

Really appreciate this advice. I certainly do not need or would ever want to use messenger / chat program.

I will research as suggested. I may have disabled this totally
( hopefully ) I got Norton to re-scan all the programs & eliminated those I didn't like. There was a lot more available than on my OEM version.

Definitely need to research & eliminate completely !

Thanks again

 

Just back now

Hi

In answer to the same ISP on both - YES therefore I presume it's not needed at all as I have no problems with the LT.


I knew there was something you can type to kill completely - I think that's where your link refers to. I am going there now to check.

Thanks again. I need this thing killed completely as I do not want anything to do with chat / messenger.

Going to link

 

back again

Hi

I used the copy / paste from the link - I got an error message after doing it - error reading OXC 16422

It did something anyway .... I sat with my LT beside me & configured all the services exactly to my DT. I found that some were on auto. etc which I had disabled on my LT.

I also have Norton alerting me ( it is tedious ..... ) but I thought it was the best way to make sure about the rules he is applying.

I then went to the site which still reports on these 2 ports - I have asked there but have not yet received a reply.

I have done several online Port Probes - all of them show my Firewall to be SECURE - even reporting that my PC was not visible etc I ran a leak test for the Firewall also which immediately alerted me that something was trying to get out of my PC

I definitely do not have a Trojan but just get the alert about the ports. Any other port probe tests report on the ports they have tested as been stealthed. Symantec's online scan also shows this ( even though it is their security that alerts me about an attempt each time I boot ! ) I am told by them that if there is an alert it means any attack was stopped.

I would love to obliterate the alert completely & also find out excatly what is using these ports which no other scan shows. This must have been a really deep scan as no matter how many I tried today they show no ports open ...... & VERY secure.

I think I have exhausted myself for today ! If I do find a remedy I will report back in case others have a problem.

 

Some spyware will try to "call home" without asking permission. And lots of it does not show as trojan/virus/whatever.

Are you using Ad-aware and Spybot? Updated recently?

 

SpyBot

Hi

I am using SpyBot - updated. I just found a few cookies & the security thing about IE - fixed those - immunized - ran again - nothing found at all.

I received a reply just now from the anti - trojan site. They tell me that if the program did not find anything it would appear to be harmless. I have a few links to follow to back this up.

It does make me very worried as I would not even go near dodgy sites never mind wanting Net meetings or Chats etc
I just hate to think that something may be trying to get me - I know it is being blocked but I do not want it there at all .......

If only I knew what to look for. I checked out add/remove Windows components but nothing. I have relatively little installed on my PC as it has only recently been upgraded to XP therefore it must be something the OS thinks I want.

I want to enjoy my PC but this scares me ........ Do you think I should install Ad/aware and see if it finds something SpyBot missed ?

I tried to search for the FLT.DLL ( read this was spyware ) I didn't find it but maybe I didn't search correctly. If I had this would it be the cause of this ?

Thanks to both of you for supporting me as I get very frightened when something like this happens - especially when I have made sure I have my Firewall / AV etc The first thing I do in the mornings is to update them without fail. I then use BT's online e-mail check to make sure I do not download anything I don't want.

I am VERY security conscious thus my concern about this.

Hopefully I will be able to get to the bottom of it soon & enjoy my PC not be scared of it

 

Try the latest version of Ad-aware too. Spybot sometimes misses things it will find (and vice versa).

 

Thanks

Hi

I will install the latest version of ad-aware today. I would much rather make sure than always worry - I am very good at the worry part

 

Netmeeting

Hi

I have found a folder in the program files called netmeeting. It is full of Dll's etc all regarding chat / meetings.

I tried to move the folder to another partition as I was not sure if I needed anything contained in it. I hoped that by moving it & everything worked without it I would be able to delete it completely ...

It started the move process but then told me it was in use by another application. To close this & then move

The only application running was Windows explorer to find the folder in the first place !

Is this folder safe just to delete from the program files ? Unfortunatley it does not appear in add/ remove programs.

I don't want to do something I am not sure about as there may be a dll there that something needs. To me they look as if they belong to caht / meetings etc - I do not need these EVER.

Appreciate any guidance on this bit. Thank you in Advance.

 

You can uninstall Netmeeting by going to Start >Run and entering:
Dll32 advpack.dll,LaunchINFSection C:\WINDOWS\inf\msnetmtg.inf,NetMtg.Remove
and then clicking OK.

 

Thanks

Hi

Your little nugget of info. just reached me after an exhaustive day searching every corner of my PC !

I had made a few tweaks to NIS & web content puting icq as one of the blocks. I ran anti-trojan hunter & it did not give a return on the ICQ port this time.

I still had the Netmeeting one ( no Trojan just possible port )

I scanned file acrchives the lot ! I have NIS alerting me while online ( TEDIOUS but creating rules as I go ) Hopefully this will eliminate the problem through time.

I have searched all corners for Spyware - nothing found.

I decided that was enough BUT before I shut down the DT PC ( on my LT now ) I ran the line that you had suggested. There was an error report on dll32 - I then changed a bit as my OS is installed on a funny partition ( due to a dual boot loss !! )

Something was unpacked or whatever it does ... I checked to see & the folder was still there but it may not be there when I next boot. I ran reg. first aid - it found obselete things to do with netmeeting - hopefully that means it has gone !


I will try & move the folder if it is still there when I use the PC again. If it lets me this time then I will know it is safe to delete - I hope


Thanks again - I don't think anything could be lurking after all this today. Hopefully this port will not be open very soon .....................
I will certainly be a port expert after this With all the credit to the help on BBS !