Hi, run Fport to determine what application has the ports open:
http://www.foundstone.com/rdlabs/proddesc/fport.html Adrien de Beaupré, BA, MCSE, GCIH, CISSP IT Security Specialist Elytra Enterprises Inc. ----- Original Message ----- From: "Richard Feaver" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, November 21, 2001 5:37 AM Subject: WIN2K Ports 32000 & 32001 Open ? > Greets all, > > recently checking one of our Win2k boxes > i found ports 32000 and 32001 open > and listening for connections. > checking google i failed to find > much concerning port 32000 but i did > find a trojan called "Donald Dick" which > apparently runs on port 32001. Ive checked > official application port listings and those > port numbers are not registered so i can only > assume its a trojan of some sort. > > Has anyone else had any experiance with these > port numbers or coudl offer any more advice > as to track down exactly what it is and how i > could go about curing the problem. I tried a > reboot aswell but they were still open on re-startup. > > thank you, > > rich >
