just a newbie or trojan hive??

_LR_ · 03-27-2002, 02:21 PM

Hi
Because im a newbie in linux im starting to wonder if this really meens i got all those damn trojans in my comp or does it just say that those ports are open and usually user by trojans??

[root@xxxx /]# nmap -v -sU -O -v xxx.xx.xx.xxx

Starting nmap V. 2.54BETA22 ( www.insecure.org/nmap/ )
Host xxxx (xxx.xx.xx.xxx) appears to be up ... good.
Initiating UDP Scan against xxxx (xxx.xx.xx.xxx)
The UDP Scan took 8 seconds to scan 1453 ports.
Warning: OS detection will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port
Interesting ports on xx.xxx.xxx(xxx.xx.xx.xxx):
(The 1433 ports scanned but not shown below are in state: closed)
Port State Service
1/udp open tcpmux
7/udp open echo
9/udp open discard
69/udp open tftp
111/udp open sunrpc
161/udp open snmp
162/udp open snmptrap
513/udp open who
635/udp open mount
640/udp open pcnfs
641/udp open unknown
700/udp open unknown
31335/udp open Trinoo_Register
31337/udp open BackOrifice
32770/udp open sometimes-rpc4
32771/udp open sometimes-rpc6
32772/udp open sometimes-rpc8
32773/udp open sometimes-rpc10
32774/udp open sometimes-rpc12
54321/udp open bo2k

acid_kewpie · 03-27-2002, 02:45 PM

no, that just lists common posts which are not specifially blocked. it does not mean that they are being used.

_LR_ · 03-27-2002, 03:16 PM

oki thnx
i will dl some anti virusprog, good to have one anyway.
just got an idea maby they were open becuse i use portsentry and it triggered om the scan?

maby i should have posted this in the newbie section.. sorry if its misplaced.

_LR_