As far as I remember, Mercur Mail Server http://www.atrium-software.com/en/mercur/mercur.asp uses port 32000 as the default port for http remote administration, does this run on your box ?
Thierry le mer 21-11-2001 � 11:37, Richard Feaver a �crit : > Greets all, > > recently checking one of our Win2k boxes > i found ports 32000 and 32001 open > and listening for connections. > checking google i failed to find > much concerning port 32000 but i did > find a trojan called "Donald Dick" which > apparently runs on port 32001. Ive checked > official application port listings and those > port numbers are not registered so i can only > assume its a trojan of some sort. > > Has anyone else had any experiance with these > port numbers or coudl offer any more advice > as to track down exactly what it is and how i > could go about curing the problem. I tried a > reboot aswell but they were still open on re-startup. > > thank you, > > rich
