S.O.S port 1025 network blackjack

Off topic chat and stuff that doesn't fit elsewhere.
Post Reply
bronx69
Junior K6'er
Posts: 42
Joined: Thu Jun 07, 2001 6:57 am

S.O.S port 1025 network blackjack

Post by bronx69 »

help I can't close port 1025 (aka) network blackjack.<br> I don't know where the Trojan is<br>their is very little info on it other than what the port is known for and some reasons it could open, but I'M sure i have a Trojan.<br> I did a port scan before and after it appeared. I even have a compleat back-up of my registry just before it popped open. but nothing seems to help<br>their must be some kind of thread that leads to it.<br><br>I need a program that will locate the bastard.<br><br> <p></p><i></i>
User avatar
Nohr
Nohrmal
Posts: 739
Joined: Sat Jun 02, 2001 8:26 pm
Contact:

Re: S.O.S port 1025 network blackjack

Post by Nohr »

Tried doing a virus scan? Do you have a firewall installed on the machine? <p>-=-=-=-=-=-=-=-=-=-=-=-=-<br>Athlon Thunderbird 1GHz@1.35GHz (9x150)<br>Iwill KK266<br>256MB Crucial PC133 CAS2 5-2-2<br>Gainward GeForce3 Ti200 4ns 231/524<br>Gateway EV910 19" monitor (1600x1200 .26mm)<br>Western Digital WD800JB 80GB 7200rpm<br>Lite-On 24/10/40x CD-RW <b>|</b> Toshiba 16/48x DVD-ROM<br>Windows XP Professional</p><i></i>
bronx69
Junior K6'er
Posts: 42
Joined: Thu Jun 07, 2001 6:57 am

S.O.S port 1025 network blackjack

Post by bronx69 »

Ok I think I found it. as it turns out somebody was using ZoneAlarm Pro against me.<br><br>I ran Norton antivirus 2000 as well as a wad of other scanners and nothing came up.<br><br>but I realized by turning off zonealarm and turning it back on it seemed to solve the problem and I was able to track down the cause to Vsmon.exe.<br>alone vsmon.exe should be harmless. its the core component of zonealarms defenses.<br><br>at the moment Im still trying to understand the details <br>and I am tracking down some leads. I will post all of my results as soon as i have a clear understanding of whats going on. People need to know<br><br> <p></p><i></i>
bronx69
Junior K6'er
Posts: 42
Joined: Thu Jun 07, 2001 6:57 am

update

Post by bronx69 »

somebody was using zone alarm against to open port 1025 also known for network blackjack<br><br>the problems:<br><br>1.every time I launced ZoanAlarm Pro port 1025 was open<br><br>2.I could not compleatly uninstall ZA, The file VSdata95.vxd would not delete and its keys continued to show up in the registry. <br><br>3.I Could not install another firewall because of a shaired resources conflect with VSdata95.vxd. <br><br><br>The solution:<br><br>1.go to Zone alarms web page, find & follow the manual uninstaall instructions. if you can delete VSdata95.vxd the you are done and do not need to proceed however if you cannot continue on to step 2. <br><br>2.go into safe mode and delete VSdata95.vxd from<br>C<!--EZCODE EMOTICON START :\ --><img src=http://www.ezboard.com/intl/aenglish/im ... ohwell.gif ALT=":\"><!--EZCODE EMOTICON END--> windows\system<br><br><br>3.still in safe mode into the registry go to EDIT -FIND & type in VSdata95 in the find what? box and hit find. delete every dword value that contains VSdata you can find. you can use the F3 key to find next. after they are all gone reboot. <br><br>4 go back into the registry and and search for any keys called VSdata95 again. delete it.<br>reboot you should be ok at this point.<br>if not your screwed god Luck ;-) <p></p><i></i>
feizex
Veteran K6'er
Posts: 322
Joined: Wed Jul 11, 2001 7:48 pm
Contact:

hey bronx!

Post by feizex »

<br>maybe zone alarm holds it open so that nothing else can open it?<br><br>did you find anything else on it? <p></p><i></i>
bronx69
Junior K6'er
Posts: 42
Joined: Thu Jun 07, 2001 6:57 am

answer

Post by bronx69 »

Nah, It should not be open in the first place. i have a backup drive thats running zoanalarm and no ports are open.<br>plus their was a key that was added to my registry that should not have been their. <br><br>however their are reports of this port being open and it is said that its normal windows activty but the fact that their was a stubborn registry setting that kept getting reinstalled after i delete it tells me that their was more to this.<br><br>also note: that after my a investagation into the problme I found that IM not the only one who has had this issue, however I do seem to be the only one who has discovered and spoken up about the link between ZoneAlarm and open port 1025. <p></p><i></i>
HaXor2600
Newbie K6'er
Posts: 1
Joined: Fri Dec 20, 2002 3:33 am

Re: S.O.S port 1025 network blackjack

Post by HaXor2600 »

If your box are using WinXP or Win2000 the port 1025 are always open dont worry it´s NOT the blackjack trojan any virus scanning will find that! <p></p><i></i>
Post Reply