.:HSTuners::

GT40FIED · 06-14-2005, 02:55 PM

For the past couple days I've been getting a notification message from Norton that it's blocking an internet worm. Apparently it's called "TransScout". From what I've been able to gather it's a remote access tool and there's no way in hell I'm letting anything remotely like that onto my PC. I even did on Whois search on ARIN and it came back as RIPE Networks...some network in Amsterdam. I don't have a clue what to do (if anything) about getting this to stop. It's hitting on port 2000 (or sometimes 1047...give or take a few ports in either instance) so I know it's not some generic or spam port probe like it would be if it were on port 80, 1026, or 1027. I want to give this backdoor bastard the finger...thoughts?

blind34_1 · 06-22-2005, 12:15 AM

wow. google turns up this, and some other site in russian. :

Port:
1999
Protocol:
TCP / UDP
Name:
tcp-id-port
OS:
Not Specified
Description:
cisco identification port
Known Trojans:
TransmissionScout (aka TransScount), Backdoor
Security Focus:
Not Specified

hows that for not helpful? At least norton is doing its job. Unfortunatly I don't have much experience dealing with worms. I've got no solutions as of yet, but I'll be asking/searching around. I'll get back to you if I find anything.

06-14-2005, 02:55 PM	#1
GT40FIED Best...mod...ever Join Date: Sep 2001 Location: At the end of the longest line Age: 43 Posts: 7,451	Seriously...what the hell? For the past couple days I've been getting a notification message from Norton that it's blocking an internet worm. Apparently it's called "TransScout". From what I've been able to gather it's a remote access tool and there's no way in hell I'm letting anything remotely like that onto my PC. I even did on Whois search on ARIN and it came back as RIPE Networks...some network in Amsterdam. I don't have a clue what to do (if anything) about getting this to stop. It's hitting on port 2000 (or sometimes 1047...give or take a few ports in either instance) so I know it's not some generic or spam port probe like it would be if it were on port 80, 1026, or 1027. I want to give this backdoor bastard the finger...thoughts? __________________ 1984 1/2 Mustang GT350 #842, Faster than you...nuff said Anna Fan Club President/Dictator Someday, in the event that mankind actually figures out what it is that this world actually revoles around, thousands of people are going to be shocked and perplexed that it was not them. Sometimes this includes me. "If you want a vision of the future, imagine a boot stamping on a human face - forever." - George Orwell Welcome to the new Amerika

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

06-22-2005, 12:15 AM	#2
blind34_1 Registered User Join Date: May 2002 Location: IL Age: 40 Posts: 1,813	wow. google turns up this, and some other site in russian. : Port: 1999 Protocol: TCP / UDP Name: tcp-id-port OS: Not Specified Description: cisco identification port Known Trojans: TransmissionScout (aka TransScount), Backdoor Security Focus: Not Specified hows that for not helpful? At least norton is doing its job. Unfortunatly I don't have much experience dealing with worms. I've got no solutions as of yet, but I'll be asking/searching around. I'll get back to you if I find anything.