N
news
Please help me here. I ran nmap from my Linux server against my Windows XP
Home Edition machine and discovered port 1025 (NFS-IIS) open. The
netstat -oa shows that the SVCHOSTS process (memory signature is 11,660K) is
controlling the port. When I killed the process 17 of the 31 automatically
started services shutdown. The machine still functions though. I then
restarted all of the services that were shutdown running nmap after each
restart to determine which service opened the port. The port never
reopened. So I then restarted the machine and guess what. There it was
port 1025 open.
What in Windows is opening this port and do I have a trojan/virus operating
on my machine? Al scans report nothing. Is this a legitimate Windows open
port associated with svchost?
Home Edition machine and discovered port 1025 (NFS-IIS) open. The
netstat -oa shows that the SVCHOSTS process (memory signature is 11,660K) is
controlling the port. When I killed the process 17 of the 31 automatically
started services shutdown. The machine still functions though. I then
restarted all of the services that were shutdown running nmap after each
restart to determine which service opened the port. The port never
reopened. So I then restarted the machine and guess what. There it was
port 1025 open.
What in Windows is opening this port and do I have a trojan/virus operating
on my machine? Al scans report nothing. Is this a legitimate Windows open
port associated with svchost?