Re: Backdoor ?? "Girlnextdoor_" TCP Ports 1025/1028

From: H C <keydet89(at)yahoo.com>
Date: Wed Mar 05 2003 - 12:59:22 EST

I'm not entirely sure what you mean by "foreign address listening to ports..."...netstat shows you what the local machine is listening on, and which endpoints the foreign addresses are connected to.

Have you tried running Foundstone's fport yet?  

> > Running netstat -a , I found a foreign address

---

> > Microsoft Windows 2000 [Version 5.00.2195]
> > (C) Copyright 1985-2000 Microsoft Corp.
> >
> > C:\>netstat -a
> >
> > Active Connections
> >
> > Proto Local Address Foreign Address
>
> > State

---

> >
> > __________________________________________________

---

> >
> > <Pre>Lose another weekend managing your IDS?
> > Take back your personal time.

> ATTACHMENT part 2 application/pgp-signature
name=signature.asc

---

Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, more http://taxes.yahoo.com/

---

<Pre>Lose another weekend managing your IDS? Take back your personal time.
15-day free trial of StillSecure Border Guard.</Pre> <A href="http://www.securityfocus.com/stillsecure"> http://www.securityfocus.com/stillsecure </A> Received on Wed Mar 5 17:29:12 2003