Port Question

[Talson]

I have noticed a few attempts to connect to my "outside" ip address through port 1871. I did some info digging and found that thisn port is used for Cano Central 0, some sort of Image cleaning program. Can anyone let me know if this could be a problem I should research further.

Thank you

 

[Xemus]

Looks like their scanning for the Hatfiend.10 trojan.

Info on the port being a target here: (at the very bottom)

http://www.computercops.biz/article2757.html

Info on the actual trojan here:

http://www.pandasoftware.com/virus_info/encyclopedia/overview.aspx?idvirus=40360

http://www.closedsocket.com

 

[Talson]

Thank you for the info, If I have computers sending info using that port, could that mean I am infected? What is a good port scanner that will let me know what ports are open on each computer, in network, and what is open to the outside?

 

[Xemus]

NMAP is one of the best port scanners to test your network.

http://www.insecure.org

Just because you have data being sent over that port does not mean that you are infected, as it is the port for Cano, as you mentioned.
If you're not using cano, then you may want to investigate further.
Up to date AV on all your machines?
Try a free online scanner.

http://www.closedsocket.com/links.html

http://www.closedsocket.com