3127 mydoom linuxboxes???

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi all,
I have noticed on one of my redhat machines that 3127 UDP is open.
I have scanned the box for viruses, appently clean, checked firewalls etc,
and I am not sure what is causing this port to remain open.
I read that this port is left open by mydoom to allow future updates to the
virus binaries, but the computer scans clean.

Have any of u guys encountered this??

M
 
me said:
Hi all,
I have noticed on one of my redhat machines that 3127 UDP is open.
I have scanned the box for viruses, appently clean, checked firewalls etc,
and I am not sure what is causing this port to remain open.
I read that this port is left open by mydoom to allow future updates to the
virus binaries, but the computer scans clean.

Have any of u guys encountered this??

M
Click to expand...

how did you test this? via netstat, online scan, or port scanner?

the online port scanners are not accurate due to firewalling, router
ACL's, and possibly a Labrea Tarpit.

michael
 
Back
Top