spiff wrote:
>
> udp scan on one of my linux boxes found
> blackjack resident on port 1025
> I know this is bad... any info on delousing my box?
Nothing is wrong with your box, 1025 is usually found open on Windows
machines with Netscape 4.x and the AIM stuff installed. Blackjack is
the name of the service that your portscanner/services file associates
with that port. Im assumning you are on a Windows machine, go to dos
and type 'netstat -an', look for anything with port 1025. Now close
another program and look again. If after closing all visible programs
the port stays open, hit control+alt+delete once and exit everything but
explorer and systray. If that port is _still_ open, you may have a
trojan horse running, telnet to localhost 1025 and see if it gives you
any of the common trojan banners.
-HD
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
