I would suggest that you download, compile and install LSOF.
ftp://vic.cc.purdue.edu/pub/tools/unix/lsof/ There is a README file on the FTP site. With LSOF, you can see what process is listening on that port and many other interesting things. -joh crymsan wrote: > Well I went a away for a week and to my suprise when I got back my hd > was full. I accidentaly left my ftp server on with anonymous acces. > Well somebody in france started a ftp server from my comp. > after removing the french movies and the folders I turned of > anonymous and nobody can get into my comp. > > I traced the ip of the person who started the server and it came from > somebody in france. I checked to see what ports they had open, and > ftp, http, and 1033???? I checked on the internet and port 1033 is > used by a program (Trojan) called Netspy. I thought I was ok because > my port 1033 was not open. but my computer is constantly recieving > packets. I didn't think that this was normal so I decided to try some > other things > > After using netstat It shows that I have a loop back from port 1033 > on my comp to 803 and vice versa. I put up a really secure firewall > for the time being but I can't find out how to remove this trojan, if > it is one. > > Anybody have any idea > > > Crymsan > -- The iMac List is sponsored by <http://lowendmac.com/> and... Small Dog Electronics http://www.smalldog.com | Refurbished Drives | - Epson Stylus Color 580 Printers - new at $69 | & CDRWs on Sale! | PowerON Computer Services <http://www.poweron.com> REPLACEMENT PARTS in STOCK Drives, CD-ROMs, RAM, Mac OS SW, Power Supply <mailto:[EMAIL PROTECTED]> Support Low End Mac <http://lowendmac.com/lists/support.html> iMac List info: <http://lowendmac.com/imac/list.shtml> Send list messages to: <mailto:[EMAIL PROTECTED]> To unsubscribe, email: <mailto:[EMAIL PROTECTED]> For digest mode, email: <mailto:[EMAIL PROTECTED]> Subscription questions: <mailto:[EMAIL PROTECTED]> Archive: <http://www.mail-archive.com/imac-list%40mail.maclaunch.com/> Using a Mac? Free email & more at Applelinks! http://www.applelinks.com
