RE: What is this port? is it a trojan?

Silly me heh, the 44334 port is my firewall:

PERSFW.EXE	  TCP		all:44334		......			Listening
PERSFW.EXE    TCP       all:44334         localhost:ingreslock	Connected in
PERSFW.EXE    UDP       all:44334         ......                  Listening
PFWADMIN.EXE  TCP       all:ingreslock    localhost:44334         Connected
out
PFWADMIN.EXE  TCP       all:1526          localhost:44334         Connected

As for ther port 5000 well the firewall has it as

SVCHOST.EXE   TCP       all:5000           ......                 Listening

There are a humber of those SVCHOST.EXE things when I take a look at the firewall ststus window. I have no idea what they are heh. Anyone enlighten me on the matter?
Regards Hyperion

-----Original Message-----
From: Uwe Röhl [mailto:uwe.roehl@kannix.net] Sent: 30 June 2003 23:13
To: Hyperion
Subject: Re: What is this port? is it a trojan?

Hello,

> Could anyone tell me how I can find out what's running behind the port in

> TCP 0.0.0.0:5000 0.0.0.0:0 LISTENING
Well, #44334 is not the only one, i'd have a look at. Fport should be the right tool:
http://www.foundstone.com/resources/proddesc/fport.htm

--
Bye, Uwe Roehl



---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: 
http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------