PDA

View Full Version : Suspicious Port used


cliodaddy
May 30th, 2004, 04:13 PM
I have ran full system scans with AVG and TDS-3, both of them tell me my system is clean.

However, using netstat (both WinXp's and TDS-3's), I have noticed that ports 12345, 20034, and 5000 are all enabled and listening. Which seems to point to problems within my system.

I tried to kill those sockets through TDS-3 but none of them can be killed.

Can someone tell me why my system is behaving so? ??? >:(

Thanks in adavance for all your suggestions and help!

Pilli
May 31st, 2004, 03:29 AM
Hi cliodaddy, These maybe listening within your system "Localhost"

You could download the trial version of Port Explorer from here: http://www.diamondcs.com.au/portexplorer/ You will then be able to see much more information regarding those sockets.

HTH Pilli

cliodaddy
May 31st, 2004, 04:20 AM
Thanks! Will try it out!

Jooske
May 31st, 2004, 04:35 AM
Hi there,
did you enable the sockets in TDS upper right?
You'll see TDS listening on a few ports more; don't worry, it is TDS listening there and with which you can emulate every server to confuse attackers or as an extra layer in your protection as yourTDS is using the ports and so other applications / intruders have to look for other ports if they still want to use your system illegal, while you can see them knocking your ports and yiou'll be able to do your stuff on them if they get too annoying.