General discussion

Locked

Opened FTP ports for all computers

By frankie.yap ·
Recently, I found all the computers on my network has the same problem; FTP port is being created on all type of OS, like Windows 98,ME, 95, 2000, NT4 Server, and Windows XP Pro. Scanned with antivirus program and trojan scan, no problem were found.

3Com software has detected the utilization of the FTP port of all infected computers is very high. What should I do? Please help!!!

This conversation is currently closed to new comments.

1 total post (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by joematus In reply to Opened FTP ports for all ...

The 3com software may just be wrong. Use nmap or some other scanner to get a second opinion. Even easier -- telnet to one of the boxes on port 21 to see if you get a response:

telnet suspect.box.com 21

If you get a timout or connection refused then it looks like 3com is wrong. If you get some kind of banner, then you may have problems. You can also go to one of the boxes and run

netstat -an

to see if it is listening on port 21. If port 21 is open then you must find out what is listening on that port. If they're not running an ftp server then run fport to see what is running on that port (it's free).

http://www.foundstone.com/resources/intrusion_detection.htm

Then seek and destroy any malware.

Back to Desktop Forum
1 total post (Page 1 of 1)  

Related Discussions

Related Forums