Results 1 to 4 of 4

Thread: BOT trojan possibly from Facebook

  1. #1
    Join Date
    Mar 2013
    Beans
    1

    BOT trojan possibly from Facebook

    Has anyone seen a trojan that tries to make an IRC connection about every minute? It keeps 'typing' "you are owned" along with some gibberish all over the place. I think I got this from a popup on Facebook asking if I wanted to change a language or something like that. I hit close and have had the problem since shortly after that. Everything else I've done has been very routine.

    How to I identify the process using tcp port 6667?

  2. #2
    Join Date
    Nov 2013
    Location
    On the edge
    Beans
    840
    Distro
    Ubuntu

    Re: BOT trojan possibly from Facebook

    Identify ports assigned to services with http://en.wikipedia.org/wiki/List_of...P_port_numbers
    port 6667 is irc.

  3. #3
    Join Date
    Jul 2008
    Beans
    2,887

    Re: BOT trojan possibly from Facebook

    I would just save the bookmarks and delete the full directory of the Web Browser that you are using and do a fresh install of that Web Browser. Restore your bookmarks and your done.

  4. #4
    Join Date
    Sep 2006
    Location
    France.
    Beans
    Hidden!
    Distro
    Ubuntu Mate 16.04 Xenial Xerus

    Re: BOT trojan possibly from Facebook

    In addition, if you did got it from Facebook, please go to your apps in your Facebook account and remove everything you do not recognize. Same for the browser plugins and extensions.
    | My old and mostly abandoned blog |
    Linux user #413984 ; Ubuntu user #178
    J'aime les fraises.
    Nighty night me lovelies!

    | Reinstalling Ubuntu ? Please check this bug first ! |
    | Using a ppa ? Please install ppa-purge from universe, you may need it should you want to revert packages back |
    | No support requests / username changes by PM, thanks. |

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •