port 1030

Discussion in 'Trojan Defence Suite' started by tutankamon, Oct 20, 2003.

Thread Status:
Not open for further replies.
  1. tutankamon

    tutankamon Registered Member

    Joined:
    Jul 10, 2003
    Posts:
    170
    Location:
    Lancashire U.K.
    port 1030 shows as being BBN AID ( RAT Clandestine
    should I be worried about this?
     
  2. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Depends on where/when you see it used and by whom for which function.
    Tried to see with PE?
     
  3. Dan Perez

    Dan Perez Retired Moderator

    Joined:
    May 18, 2003
    Posts:
    1,495
    Location:
    Sunny San Diego
    What was the application that held onto that port? Does it hold onto the same port when you launch it after a reboot? If yes, this is definitely something that you should be worried about but my guess is that the port will be different after a reboot. (If the port is different then it is probably just a normal use of ephemeral ports.)

    Port Explorer, as Jooske suggested, is the surest way to gauge whether this is something that needs to be further scrutinized.
     
  4. tutankamon

    tutankamon Registered Member

    Joined:
    Jul 10, 2003
    Posts:
    170
    Location:
    Lancashire U.K.
    Thanks for the replies, I was using TDS3 netstat tool,
    I have not seen it again on the last 3 occasions that I have started up.
     
Thread Status:
Not open for further replies.