Well after checking out my log files for Tiger Security I got some interesting entries that no one could deny or call me paranoid over...

I've got a process "portmap" listening on socket 111 with both TCP and UDP . and that's not the worse of it, I've got this prjlithium.exe listening on socket 1090 !

Can someone please tell me what I could do to get rid of this "back-hole" on my system ? Or if I might have to reinstall my system what I could do to prevent this from happening again?

Any help would be appreciated (like always)..... Thank you....

prjLithium.exe file seems to be an essential system or application file. If you got this prjLithium.exe error, your system or application can not function properly. Having prjLithium.exe error indicates that your Registry is not stable and may have other potential registry issues. Improper installing or uninstalling applications on your system will make your registry size larger and larger and eventually corrupt.

How to Safely Fix This Error and Other Errors?

It’s rather difficult and painful to deal with system errors, especially when you do not know their causes and methods to repair them. In fact, it’s quite easy for people to repair most of system errors. There are many reasons that result in prjLithium.exe error or similar errors on your computer. prjLithium.exe file can be deleted by mistake or accidently by users or some computer applications, such as antivirus or antispyware. In this way, the prjLithium.exe file is missing or not found. If you still use certain application in the computer, you can try to copy the prjLithium.exe file from another computer and save it on the corresponding folder. Or you can just go to reinstall that application and prjLithium.exe file may be available.

In case you have uninstalled the application and do not want to use that application again, you should go to Registry and delete the corresponding invalid registry entry of prjLithium.exe file so that the system will not load it and prjLithium.exe error will be fixed. Windows Registry is a database which stores the configuration settings of the system and applications. That’s to say, it determines how the system and applications run or work. If you delete other registry entry by mistake, you may get another new error popup. So it’s recommended that you use an automatic registry cleaning tool to regularly clean invalid registry entries and optimize the system.................

http://www.fixerrorguide.com/fixpcfile/H...error.html

This post was last modified: 09-09-2012 02:05 AM by skyblue1 .

Course that may/may not help someone using linux

But then again reading through that, you may find that you dont actually have any problem as it is an essential system or application file

This post was last modified: 09-09-2012 02:09 AM by skyblue1 .

prjlithium.exe is not an essential part of any linux distro, my guess is it's running under wine and is indeed a trojan.

portmap is pretty standard and not a concern - but this other file running in wine i'd suggest killing and then finding where it came from.

It's a malware listed here, e.g.: http://www.incodesolutions.com/virl283.php

So that's why SELinux always gave me warnings when I used Wine in Fedora...