[PAGMAN]

OK. I downloaded Cybergate and installed the server on my computer. I Then opened up the manager. My computer was shown in the list of connected computers. I clicked on my computer and went to VIEW PORTS so that I could see all of the open ports on my computer. I was browsing through them when I came across the little Cybergate server file (server.exe) that i JUST installed running on my computer. It had 2 connections open! One to MY computer (192.168.2.7) and one to some weird IP address (109.171.91.91) THAT IS NOT MINE!😠 I googled the IP and found NOTHING. I have never heard of this address.

Does the maker of Cybergate have some "master" program that allows him to connect to any computer with his software installed on it? That is what I am beginning to think.

Can someone please help me out here? Thanks!

[Morph3s]

I know that cybergate has a update feature ,
But i only think it connects when u press update,
And btw if u wanna be sure then always run it sandboxed

[I am fool]

You are the biggest idiot ever. CyberGate has no backdoor. And you always have random fucking ports running through your pc through your internet. Stop posting fucking threads before analyzing shit you dirty douchebag.

Please don't flame him. First unplug from the internet, Run a scan using malwarebytes, Block the IP if you think it is malicious in anyway.

[PAGMAN]

Data, Please calm down. We dont need to get all pissy over a simple question. I really don't see the harm in asking my simple question. And FYI, why would there be randomly opened ports to random IP addresses? That is usually a "here's your sign" kind of thing for most computer-savvy people.

For every minute you are angry, you lose sixty seconds of happiness. ~Author Unknown

---

¢aявøn_ғιвєя.εχε™, thank you for your "kind" response 😁. I have done what you suggested and am going to check for the open connection now. I'll post my results...

---

Its still happening... 😯

[I am fool]

Data, Please calm down. We dont need to get all pissy over a simple question. I really don't see the harm in asking my simple question. And FYI, why would there be randomly opened ports to random IP addresses? That is usually a "here's your sign" kind of thing for most computer-savvy people.

For every minute you are angry, you lose sixty seconds of happiness. ~Author Unknown

---

¢aявøn_ғιвєя.εχε™, thank you for your "kind" response 😁. I have done what you suggested and am going to check for the open connection now. I'll post my results...

---

Its still happening... 😯

Then go into your routers CP and manually block the IP.

If you do not know how to get into it do the following.

Open Cmd

Type ipconfig and hit enter

Find your default Gateway should look like 192.168.0.1 or similar

Type it into your internet browser

If it asks for a password use USER: admin PASSWORD: admin/password

Go into service's and hit block service and type the malicious IP and it should stop.

And don't worry man just ignore the useless posters and wait for someone helpful to come :D

[PAGMAN]

Thank you! I'll do that. But it seems like the IP changes sometimes. I'm not sure if there is a collection of IP addresses that it alternates through or if the remote "computer" is using something like no-ip. What do you think?

---

> And don't worry man just ignore the useless posters and wait for someone helpful to come :D

Thanks 😁

[I am fool]

Could be a advanced trojan not sure about the changing of its IP.

[PAGMAN]

Ya. It leads me to suspect that as the remote "attacker" (I don't know what else to call him) changes his IP address, The program changes its connection to that IP. Which is what no-ip does. That is probably how it is working. With his no-ip account. 🤗 I think I figured him out. Now, if I'm correct, how would I get the news out so that OTHERS aren't valuable to his attacks?

[Sage Mode]

You are the biggest idiot ever. CyberGate has no backdoor. And you always have random fucking ports running through your pc through your internet. Stop posting fucking threads before analyzing shit you dirty douchebag.

You do not know that. You did not code the fucking program.

[ahmedzero]

You are the biggest idiot ever. CyberGate has no backdoor. And you always have random fucking ports running through your pc through your internet. Stop posting fucking threads before analyzing shit you dirty douchebag.

I "like" people that don`t know and have anything smart and constructive to say, and start insulting others like they killed all of their family...

Who is douchebag and idiot here... I`m wondering...
LOL

[pushl %ebp]

Try scanning it on Anubis.

[flAmingw0rm]

Dude.

1) RATs are detected because they are hack tools! You are not infected, depens where you downloaded CyberGate from. Official website for CyberGate is http://cyber-sec.org/.
2) You are not infected just because your antivirus pop up, and you can remove yourself from the client, by pressing right click on your mouse and "Uninstall".
3) 109.171.91.91 may be your victim, if you spreaded your virus.

And your question:

Code

Does the maker of Cybergate have some "master" program that allows him to connect to any computer with his software installed on it?

The answer is NO. The owner of this program won't control your computer, if you downloaded this from somewhere else, that's not the real author controling you!

[PAGMAN]

I "like" people that don`t know and have anything smart and constructive to say, and start insulting others like they killed all of their family...

Who is douchebag and idiot here... I`m wondering...
LOL

I'm glad that I'm not the only one that thinks that! 😑

---

m3epo,
I downloaded Cybergate from the official site. Besides, My antivirus is disabled whenever I use it, so that is NOT the reason that I am concerned about the connection.

[Sector9]

109.171.91.91 is http://www.ip-adress.com/ip_tracer/109.171.91.91

aka Russian Federation
IP address state: Novosibirsk

[PAGMAN]

That's a little creepy. Some Russian dude is spying on me!