[cobalt-users] Port 1045 Rasmin

["Felix Kaegi" <felix@xxxxxxxxxxxx>]

We just installed our first RAQ 550 and users complain that they are
getting alerts from their firewall that the Rasmin trojan (mIRCPlus) is
attempting a connection from our RAQ server (see message below). 

Has anyone else experienced the same? If it is indeed a trojan, does
anyone know how it could get onto the RAQ, and more important, how can
we remove the trojan?

>A computer at IP address xx.xxx.xxx.xx has attempted an 
>unsolicited connection to TCP port 1045 on your computer.
>TCP port 1045 is commonly used by the "Rasmin Trojan" service 
>or program. The source computer has scanned your computer 
>for this trojan, but it has been blocked by your firewall.