Security Basics mailing list archives

Re: Why do all of my win2sp4 machines have port 110 open?


From: waters <realized () gmail com>
Date: Tue, 12 Oct 2004 19:34:33 -0700

The answer was in my email... 

ccApp.exe, part of Norton AntiVirus Email Scanner.

The way i found this out was with tcpview open i telnetd to that port
and saw what applications responded.


On Tue, 12 Oct 2004 19:27:14 -0700, waters <realized () gmail com> wrote:
When i telnet to that port on 110, i connect then get disconnected
right away. Norton with updated def files and housecall(trendmicro)
reports nothing, and no trojans were also found via the two.

Is this normal?

i am using a network security scanner and so far 4/34 windows
machines, the only 4 it scanned so far, all have something on port
110.

How can i find out whats going on?

netstat and tcpview (
http://www.sysinternals.com/ntw2k/source/tcpview.shtml ) show nothing
on 110 either.



Current thread: