OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[Full-disclosure] fport results

From: X u r r o n (xurrongmail.com)
Date: Fri Sep 02 2005 - 08:46:14 CDT

i got these results from fport, i found Messenger suspcious on port 13929
and its listening if i do telnet to it.
  Pid Process Port Proto Path
1292 svchost -> 135 TCP C:\WINDOWS\system32\svchost.exe
1384 svchost -> 1025 TCP C:\WINDOWS\System32\svchost.exe
792 navapw32 -> 1027 TCP C:\PROGRA~1\NORTON~1\navapw32.exe
344 alg -> 3002 TCP C:\WINDOWS\System32\alg.exe
1384 svchost -> 3003 TCP C:\WINDOWS\System32\svchost.exe
1384 svchost -> 3004 TCP C:\WINDOWS\System32\svchost.exe
880 MsnMsgr -> 3363 TCP C:\Program Files\MSN Messenger\MsnMsg
880 MsnMsgr -> 3413 TCP C:\Program Files\MSN Messenger\MsnMsg
1588 svchost -> 5000 TCP C:\WINDOWS\System32\svchost.exe
964 msmsgs -> 13929 TCP C:\Program Files\Messenger\msmsgs.exe

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/