I used a netmon to check the port status of our win98 client. found the ports 1104, 1025, 1092, 1093, 1095, 1098, 1099 were listening to *.*. I knew these ports could be related to trajons, appreciate someone provide comments on "is it a just negative positive, or real trajon?" -
The port information related to trajon:
port 1024 Latinus, Lithium, NetSpy, Ptakks
port 1025 AcidkoR, BDDT, DataSpy Network X, Fraggle Rock , KiLo, MuSka52,
port 1092 Hvl RAT
port 1095 Blood Fest Evolution, Hvl RAT, Remote Administration Tool - RAT
port 1097 Blood Fest Evolution, Hvl RAT, Remote Administration Tool - RAT
port 1098 Blood Fest Evolution, Hvl RAT, Remote Administration Tool - RAT
port 1099 Blood Fest Evolution, Hvl RAT, Remote Administration Tool - RAT
The active port status of my Win98 was:
Remote address : *:*
Local address : *:1092
Protocol : UDP
Remote address : *:*
Local address : *:1093
Protocol : UDP
Remote address : *:*
Local address : *:1099
Protocol : UDP
Remote address : *:*
Local address : *:1100
Protocol : UDP
Remote address : *:*
Local address : 10.194.1.108:netbios-ns
Protocol : UDP
Remote address : *:*
Local address : 10.194.1.108:netbios-dgm
Protocol : UDP
Remote address : *:*
Local address : localhost:1104
Protocol : UDP
Remote address : *:*
Local address : *:loc-svr
Protocol : TCP
Status : Listening
Remote address : *:*
Local address : *:1091
Protocol : TCP
Status : Listening
Remote address : *:*
Local address : *:1092
Protocol : TCP
Status : Listening
Remote address : *:*
Local address : *:1093
Protocol : TCP
Status : Listening
Remote address : *:*
Local address : *:1095
Protocol : TCP
Status : Listening
Remote address : *:*
Local address : *:1098
Protocol : TCP
Status : Listening
Remote address : *:*
Local address : *:1099
Protocol : TCP
Status : Listening
Remote address : *:*
Local address : *:1100
Protocol : TCP
Status : Listening
Remote address : *:*
Local address : *:1102
Protocol : TCP
Status : Listening
Remote address : *:*
Local address : 10.194.1.108:netbios-ns
Protocol : TCP
Status : Listening
Remote address : *:*
Local address : 10.194.1.108:netbios-dgm
Protocol : TCP
Status : Listening
Remote address : *:*
Local address : 10.194.1.108:netbios-ssn
Protocol : TCP
Status : Listening
Remote address : *:*
Local address : 127.0.0.1:1025
Protocol : TCP
Status : Listening
Remote address : *:*
Local address : 127.0.0.1:1104
Protocol : TCP
Status : Listening
