3127 mydoom linuxboxes???

[Guest]

Hi all,
I have noticed on one of my redhat machines that 3127 UDP is open.
I have scanned the box for viruses, appently clean, checked firewalls etc,
and I am not sure what is causing this port to remain open.
I read that this port is left open by mydoom to allow future updates to the
virus binaries, but the computer scans clean.

Have any of u guys encountered this??

M

 

[Gnome de Plume]

Hi all,
I have noticed on one of my redhat machines that 3127 UDP is open.
I have scanned the box for viruses, appently clean, checked firewalls etc,
and I am not sure what is causing this port to remain open.
I read that this port is left open by mydoom to allow future updates to the
virus binaries, but the computer scans clean.

Have any of u guys encountered this??

M

how did you test this? via netstat, online scan, or port scanner?

the online port scanners are not accurate due to firewalling, router
ACL's, and possibly a Labrea Tarpit.

michael