Re: What runs on port 2500

From: Duane Arnold (notme_at_notme.com)
Date: 09/22/04 

Date: Tue, 21 Sep 2004 23:14:45 GMT

Leythos <void@nowhere.org> wrote in
news:MPG.1bba6262e4483572989708@news-server.columbus.rr.com:

> In article <ciptb7$gsg$1@nntp.itservices.ubc.ca>,
> unruh@string.physics.ubc.ca says...
>> It was outgoing port 2500? Sounds like some sort of malware. It sure
>> should not be connecting to 17000 machines. Were the connections
>> successful? I would advice removing it, erasing everything and
>> reinstalling and updating. Sounds far too suspicious.
>
> Nice thought, but I don't have control of the machine. The system was
> connecting to port 2500 on the remote end, not going out port 2500.
> From what I can see, 2500 may be a valid port for some service, but I
> can't say yea/nay yet.
>
> As for removing it, that would be nice if I could identify it without
> formatting the computer or having to make another trip to that
> location.
>
> I agree, that it sounds suspicious, that's why I blocked it at the
> firewall, but I would still like to know what it is.
>

The only way you're going to know is use the proper tools to find it. Why
can you not do it remontely?

http://tinyurl.com/klw1

Duane :)

Quantcast