Re: porte UDP un ascolto

On Sat, Jul 20, 2002 at 04:52:21PM +0100, Adriano Meis wrote:
> Salve.
> Ho notato che su W2K ci sono sempre due porte UDP in LISTEN,
> ed esattamente:
> 38239 -> PSD.EXE
Cercando l'eseguibile PSD.EXE dove in che directory e'?

> 38037 -> MSGSYS.EXE
Visto che quelli del sans adesso richiedono che tu sia iscritto per vedere la
loro knowledge base usiamo la copia cache di google:

http://www.google.it/search?q=cache:K58mUVLjiTYC:rr.sans.org/sysadmin/fport.php+MSGSYS.EXE&hl=it&ie=UTF-8

MsgSys.exe - This program opened port 38037 when the Norton Antivirus
Client was started as a service. In checking the properties of this file, it
was actually created by Intel. A thorough search of Intel's web page regarding
this file revealed nothing. A search of the disk drive showed that this
file was indeed installed during the installation of Norton Antivirus software.

-- 

Fabio Pietrosanti ( naif )
E-mail: naif@blackhats.it - naif@sikurezza.org
PGP Key (DSS) http://www.s0ftpj.org/misc/naif.asc
--
 "Hacking is the future of security research" R.Power, CSI 
Free advertising: www.openbsd.org Multiplatform Ultra-secure OS

________________________________________________________
http://www.sikurezza.org - Italian Security Mailing List