Security Basics mailing list archives

RE: port 6060


From: Meidinger Chris <chris.meidinger () badenit de>
Date: Mon, 22 Sep 2003 09:42:15 +0100

You can use fport from foundstone.com to see which process is listening on
6060. Alternatively netstat -ano will give you the process number, which you
can then cross-check with task manager.

-----Original Message-----
From: Faisal Masood [mailto:faisyuet () wol net pk] 
Sent: Saturday, September 20, 2003 12:33 AM
To: 'Carl-Erich Lindström'; security-basics () securityfocus com
Subject: RE: port 6060


There is a possibility that some Trojan is there in your system. Follow
these steps.

1) Check running processes in Task Manager. Monitor anything suspicious.
Also check running services & stop unwanted services.

2) In firewall don't filter just incoming traffic. Do egress filtering too.

3) Run complete virus scan of your system. Make sure virus definition files
are updated.

4) Go to www.PestPatrol.com. They offer a free version of PestPartol, their
product used to detect & remove pests (Trojans, worms etc)

I hope this would resolve your issue.


Regards

Faisal Masood (FM)
Lahore Pakistan




-----Original Message-----
From: Carl-Erich Lindström [mailto:carl-erich.lindstrom () polarteknik com]

Sent: Friday, September 19, 2003 5:39 PM
To: security-basics () securityfocus com
Subject: port 6060



Hi.



My home pc is win2k sp4 with f-secure 5.4, distributed firewall 5.5.

Something is listening in port 6060, allso machine sends lots of spam.

My isp said that. Is there anything to do to detect what it is.

Nto-scanner did not find anything.



Thanks.

------------------------------------------------------------------------
---
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
------------------------------------------------------------------------
----



---------------------------------------------------------------------------
----------------------------------------------------------------------------

---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: