Full Disclosure mailing list archives

fport results

From: X u r r o n <xurron () gmail com>
Date: Fri, 2 Sep 2005 18:46:14 +0500

i got these results from fport, i found Messenger suspcious on port 13929 
and its listening if i do telnet to it.
  Pid Process Port Proto Path
1292 svchost -> 135 TCP C:\WINDOWS\system32\svchost.exe
1384 svchost -> 1025 TCP C:\WINDOWS\System32\svchost.exe
792 navapw32 -> 1027 TCP C:\PROGRA~1\NORTON~1\navapw32.exe
344 alg -> 3002 TCP C:\WINDOWS\System32\alg.exe
1384 svchost -> 3003 TCP C:\WINDOWS\System32\svchost.exe
1384 svchost -> 3004 TCP C:\WINDOWS\System32\svchost.exe
880 MsnMsgr -> 3363 TCP C:\Program Files\MSN Messenger\MsnMsg
880 MsnMsgr -> 3413 TCP C:\Program Files\MSN Messenger\MsnMsg
1588 svchost -> 5000 TCP C:\WINDOWS\System32\svchost.exe
964 msmsgs -> 13929 TCP C:\Program Files\Messenger\msmsgs.exe

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

fport results X u r r o n (Sep 02)