Re: Backdoor ?? "Girlnextdoor_" TCP Ports 1025/1028

From: Kevin Patz <jambo_cat(at)yahoo.com>
Date: Wed Mar 05 2003 - 13:56:40 EST

('binary' encoding is not supported, stored as-is)
In-Reply-To: <1046857854.1736.10.camel@JayHome>

Do a "netstat -a -n" to get IP addresses instead of host names. Girlnextdoor is the name of a computer on your network (NETBIOS name), or a reverse DNS resolution on the IP address. If a netstat with the - n option shows 0.0.0.0:0 then it's just services on your PC listening for connections (epmap, microsoftds,  etc.).

What's in your hosts and lmhosts files?

>> C:\>netstat -a

>>=20

>> Active Connections

>>=20
>> Proto Local Address Foreign
Address =20
>> State
Girlnextdoor_:0 =20
>> LISTENING
Girlnextdoor_:0 =20
>> LISTENING
Girlnextdoor_:0 =20
>> LISTENING
Girlnextdoor_:0 =20
>> LISTENING
Girlnextdoor_:0 =20
>> LISTENING
>>=20
>> C:\>

---

<Pre>Lose another weekend managing your IDS? Take back your personal time.
15-day free trial of StillSecure Border Guard.</Pre> <A href="http://www.securityfocus.com/stillsecure"> http://www.securityfocus.com/stillsecure </A> Received on Wed Mar 5 17:37:33 2003