Port 4444

[ajd]

I understand that the Blaster Worm uses port 4444. For
some reason our two domain controllers are communicating
through this port? I've ran several virus scans and it
finds nothing. Can anyone tell me if W2K domain
controllers use this port for something?

thanks, ajd

 

[Simon Geary]

I don't know of any legitimate uses for this port on a DC. Do you have the
026 patch installed? Try the Microsoft Blaster removal tool and see if it
comes up with anything.
http://www.microsoft.com/downloads/...8b-fe98-493f-ad76-bf673a38b4cf&displaylang=en