Re: Weird Port Open


Subject: Re: Weird Port Open
From: Paul J. Lucas (pauljlucas@mac.com)
Date: Wed Apr 25 2001 - 09:01:14 MDT


On Wed, 25 Apr 2001, Patrick J. Larkin wrote:

> I ran a Port Scan on my YDL machine and found port 1024 is open. Anyone
> know what this is? An analysis program reported that it was a Trojan named
> "Netspy" but all of my research shows this as a Windows trojan.
>
> Anyone have any suggestions on what can be done?

        Did you try simply telnet'ing to the port to see what you get?
        Or:

                netstat -p --tcp
        and:
                lsof

        ?

        - Paul



This archive was generated by hypermail 2a24 : Wed Apr 25 2001 - 09:03:14 MDT